Privacy Policy
Last updated July 3, 2026
Josh Wenke ("we", "us") runs this website at joshwenke.com. This policy explains, in plain language, what information we collect, why, and the choices you have. If anything here is unclear, please reach out — we're happy to explain.
The short version
- We don't sell or rent your personal information — ever.
- We only collect what we need to run the service for you.
- We protect your data and limit who can see it.
- You can ask us to access, correct, or delete your information at any time.
What we collect
- Account details — your name, email address, and a password (which we store only as a secure, irreversible hash — we never see your actual password). You give us these when you register or sign in.
- Profile details you choose to add — such as a phone number or mailing address, if you add them.
- Things you submit — the contents of any forms or requests you send us through the site.
- Payment details — when you pay, our payment processor (Stripe) handles your card information directly. We receive only what we need to manage your order or invoice (for example, the amount, the last four digits, and the status). We never store full card numbers on our own servers.
- Basic usage information — to understand how the site is used and make it better, we record privacy-friendly, first-party analytics (pages visited, rough device/browser type). This stays with us — there's no cross-site advertising tracking.
- Anti-spam signals — to keep bots off our public forms we use Cloudflare Turnstile, a privacy-friendly check that confirms you're human without tracking you across other sites or building an advertising profile.
- Technical log data — like your IP address and browser type, kept briefly to keep the service secure and working.
What we use it for
We use your information to:
- Create and run your account, and sign you in securely.
- Provide the features you ask for and respond to your requests.
- Send you essential messages about your account, like confirmations and important notices.
- Process payments, invoices, and receipts.
- Keep the service safe, prevent abuse, and meet our legal obligations.
- Improve how the service works.
When you register, the details you provide are used to set up and secure your account and to contact you about it. That's it — we don't repurpose your registration data for advertising, and we never share or sell it.
When we share information
We don't sell your personal information, we use no advertising networks, and we never share your data for anyone else's advertising. We're deliberate about the outside companies we integrate with, and we deliberately avoid data-hungry services. There's no Google Analytics and no cross-site ad tracking on this site.
We rely on a few trusted service providers to operate, and we share only what each one needs to do its job for us:
- Stripe — securely processes payments and card details.
- Cloudflare — runs a privacy-friendly anti-spam check (Turnstile) on our public forms.
We may also disclose information if the law requires it, to protect people's safety, or to enforce our terms — and we'll resist overbroad requests. If we're ever part of a merger or sale, we'll require any successor to honor this policy.
Our platform provider
This site is built and operated on AppFramework, the platform that powers it. To keep the service running, secure, and supported, a small number of AppFramework platform staff may access data stored here — for example to fix a problem, investigate a security issue, or help with a support request. They act under strict confidentiality and only when there's a genuine operational need. AppFramework never sells your data or uses it for advertising.
How we protect your information
We take security seriously and use safeguards including:
- Encrypted in transit & hashed passwords — traffic to and from the site is encrypted with HTTPS, and passwords are stored only as secure one-way hashes, never as plain text.
- Card data handled by Stripe (PCI-compliant) — payment card details go straight to Stripe, a PCI-DSS-certified payment processor, and are never stored on our servers.
- Least-privilege access & MFA — access to data is limited to those who need it for their role, and accounts can be protected with multi-factor authentication.
- Per-organization isolation — each organization's data is scoped and kept separate from every other organization on the platform.
No online service can promise perfect security, but we work hard to protect your information and to fix issues quickly if they arise.
How long we keep it
We keep your information for as long as your account is active or as needed to provide the service, and a little longer where the law requires (for example, financial records). When it's no longer needed, we delete or anonymize it. You can ask us to delete your data sooner — see below.
Your choices and rights
- Access & update — you can view and edit much of your information from your account settings.
- Email preferences — you can unsubscribe from non-essential emails at any time using the link in any such message.
- Access or deletion — contact us via our contact form to request a copy of your information or to have it deleted.
We'll never penalize you for exercising your privacy rights.
If you're in the European Union or United Kingdom
If you're located in the EU or UK, you have rights under the GDPR, including the right to access, correct, delete, restrict, or object to our use of your personal data, and to data portability. We process your data to provide the service you requested (contract), to meet legal obligations, and based on our legitimate interest in running and securing the service safely — and, where required, with your consent. You can exercise these rights by contacting us via our contact form. You also have the right to lodge a complaint with your local data protection authority.
If you're a California resident
Under the CCPA/CPRA, you have the right to know what personal information we collect and how we use it, to request access to or deletion of it, to correct it, and to not be discriminated against for exercising these rights. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under California law. To make a request, contact us via our contact form.
Children's privacy
This service isn't directed to children under 13, and we don't knowingly collect their personal information. If you believe a child has provided us information, contact us via our contact form and we'll delete it.
Cookies
We use a small number of essential cookies to keep you signed in and the site working. We also set first-party analytics cookies to understand site usage; these don't track you across other websites. Our anti-spam check (Cloudflare Turnstile) may store a short-lived token to confirm you're human; it doesn't track you across other websites. You can control or clear cookies in your browser settings.
Changes to this policy
If we make material changes, we'll update this page and revise the "last updated" date above. Please check back from time to time.
Contact us
Questions about your privacy? We'd genuinely like to help.
Josh Wenke
The best way to reach us is our contact form.