Effective July 28, 2026
This policy explains what information alanfullbeard.com collects, why it is used, how long it is kept, and the choices available to you.
Information you provide
The contact form asks for your name, email address, and message. A phone number is optional. Permission to text defaults to No; if you select Yes, your number will be used only to reply about your inquiry, not for marketing.
Contact-form delivery and storage
Submitting the contact form automatically stores an encrypted copy in this site’s WordPress database through Flamingo for spam review and follow-up. Storage does not depend on a separate checkbox. The site may also attempt to send Alan an email notification through MailerSend, but email delivery is not guaranteed and a delivered email is stored separately from the encrypted WordPress copy.
Spam and security information
Cloudflare Turnstile helps distinguish people from automated abuse. It may process security signals such as your IP address, browser or user-agent information, TLS characteristics, the site’s Turnstile key, and the page origin. These signals are used for bot detection and security.
The saved submission may also contain technical metadata supplied by Contact Form 7, such as the submission time, IP address, user agent, and page URL. Visitor-supplied fields and sensitive technical metadata are encrypted in the saved WordPress record. Spam classifications may be used to improve the site’s local spam scoring.
How information is used
- To deliver and respond to your inquiry.
- To text you about the inquiry only when you explicitly select Yes.
- To detect spam, fraud, abuse, and technical problems.
- To meet legal obligations or protect the site and its users when reasonably necessary.
Contact information is not sold, rented, or used for advertising lists.
Retention
- WordPress inbox messages are automatically deleted after 180 days.
- Messages classified as spam or moved to trash are automatically deleted after 30 days.
- If an email notification is delivered, that copy is reviewed and normally deleted within 180 days, unless it is still needed to complete the conversation, maintain a necessary business record, resolve a dispute, protect the site, or comply with law.
- Limited copies may remain temporarily in service-provider backups or security logs until those systems rotate them.
Service providers
- DigitalOcean provides website, database, and private-file hosting. See the DigitalOcean Privacy Policy.
- MailerSend may deliver contact-form notification email. See the MailerSend Privacy Policy.
- Cloudflare Turnstile provides bot detection. See the Turnstile Privacy Addendum.
Security
The site uses HTTPS, restricted administrative access, and other technical safeguards. Contact-form fields, sender details, and sensitive technical metadata are encrypted at rest in WordPress with Sodium XChaCha20-Poly1305 and can be decrypted only by an authorized administrator with access to the separate vault key. Operational information such as the submission date, delivery or spam status, spam score, encryption version, form identifier, and a keyed privacy-request lookup remains unencrypted. Email notifications and provider backups are outside this application-level database encryption. No website, email system, or internet transmission can be guaranteed completely secure, so please do not send highly sensitive information through this contact form.
Your choices and requests
You can decline permission to text or later withdraw texting permission. Contact-form storage is automatic rather than controlled by a separate opt-in. You may ask what contact information is held about you or request correction or deletion. A keyed lookup allows WordPress’s personal-data tools to locate, export, or delete encrypted messages using the email address submitted with the form without storing that address as a searchable plaintext value.
Send privacy or deletion requests to alan@alanfullbeard.com. Alan may need to verify that the request concerns your email address before disclosing or deleting information. Some information may be retained when reasonably required by law, security, or an unresolved dispute.
Policy changes
This policy may be updated when the site’s forms, providers, or data practices change. The effective date at the top will be revised when material changes are published.