Legal
Privacy policy.
What data this site collects, how it is used, and what your rights are. Plain language — no legalese.
Overview
The short version
- This site uses Google Analytics, Google Tag Manager, HubSpot, Bing / Microsoft Analytics, and plans to use the Meta (Facebook) Pixel for audience measurement, CRM activity, and ad performance.
- The contact form and project brief collect your name, email, and the details you send so I can reply and prepare for a first meeting. That is all they are used for.
- Analytics data is aggregated and anonymised — it is not used to identify you personally.
- No data is sold or shared with anyone outside the services listed in this policy.
- You can opt out of analytics tracking at any time — see the opt-out options below.
- You can request deletion of any personal data by writing to me.
About this site
Who I am
This website — matthummel.com — is a personal portfolio and blog run by Matt Hummel, an independent WordPress developer. It is not operated by a company.
For questions about this policy or any data I hold, contact me directly.
Data collected
What I collect
Four categories of data may be collected when you use this site.
Contact & project brief
When you submit the contact form or project brief, I collect:
- Name — to address you correctly
- Email address — to reply
- Message / brief fields — what you need, goals, optional company and timeline
- Subject / who you are — optional on the short form
Blog comments
If you leave a comment on a post, I collect:
- Name — displayed with the comment
- Email address — for reply notifications only
- Comment text — displayed publicly
Analytics & advertising
Third-party tools used to understand traffic and ad performance:
These tools collect pages visited, session duration, device type, approximate location, and IP address. See opt-out options.
Server logs
The hosting server automatically records:
- IP address
- Browser type and version
- Page requested and date/time
- HTTP referrer
Not collected
What I do not collect
- No payment data — this site has no e-commerce or checkout
- No account or login data — there is no user registration on this site
- No sensitive personal data (health, financial, biometric, or similar)
- Analytics data is not used to build individual profiles or target you personally on this site
Cookies
Cookies
This site sets functional cookies and third-party analytics cookies. The table below lists all cookies in use.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
comment_author_* | This site | Remembers your name and email after leaving a comment | 1 year |
wordpress_test_cookie | This site | Checks that your browser accepts cookies (admin login only) | Session |
mh-theme | This site | Stores your light/dark mode preference | localStorage — no expiry |
_ga, _ga_* | Google Analytics | Distinguishes unique visitors; tracks sessions, pages, and referrers | 2 years |
_gid | Google Analytics | Stores and updates a unique value for each page visited | 24 hours |
_fbp | Meta (Facebook) Pixel | Identifies browsers for ad delivery and measurement (planned) | 3 months |
hubspotutk | HubSpot | Tracks a visitor's identity across sessions and associates form submissions with browsing history | 13 months |
__hstc | HubSpot | Main cookie for tracking visitors — stores session count, timestamps, and original referrer | 13 months |
__hssc | HubSpot | Keeps track of sessions for analytics purposes | 30 minutes |
__hssrc | HubSpot | Determines whether the browser has been restarted between sessions | Session |
_uetsid, _uetvid | Microsoft UET | Tracks sessions and unique visitors for Bing Ads conversion measurement | 1 day / 16 days |
MUID | Microsoft | Identifies unique web browsers visiting Microsoft sites and services | 13 months |
You can block or delete cookies through your browser settings. Blocking third-party cookies disables analytics tracking. Blocking functional cookies may affect comment submission.
Data sharing
Who sees your data
Your data is not sold, rented, or shared with third parties for marketing purposes. It may reach the following parties in the course of normal operation:
- Google — Google Analytics 4 and Google Tag Manager receive anonymised usage data (page views, session data, device type, approximate location). Subject to Google's privacy policy. IP anonymisation is enabled.
- Meta (Facebook) — the Meta Pixel (planned) sends event data to Meta for ad measurement and reach reporting. Subject to Meta's privacy policy.
- HubSpot — HubSpot tracking is active on this site. It collects IP address, browser and device data, pages visited, and form submissions to support CRM and marketing activity. If you submit the contact form, your name and email may be stored in HubSpot. Subject to HubSpot's privacy policy.
- Microsoft (Bing) — Bing Webmaster Tools and the Microsoft UET tag collect aggregated search performance data and conversion events. Data is subject to Microsoft's privacy statement.
- Hostinger — the web hosting provider stores the site database and files. Hostinger's privacy policy.
- GitHub — this site reads public data from the GitHub API to display on the Code page. No personal visitor data is sent to GitHub. GitHub's privacy policy.
- Law enforcement — data may be disclosed if required by a valid legal process.
Opt out
How to opt out of analytics
You have several options for limiting or disabling analytics tracking on this site:
Google Analytics opt-out
- Install the Google Analytics Opt-out Browser Add-on
- Enable "Do Not Track" in your browser settings (honoured on a best-effort basis)
- Block
*.google-analytics.comvia an ad blocker or browser extension
Meta Pixel opt-out
- Use the Facebook Ad Preferences to limit off-Facebook tracking
- Install the Facebook Container browser extension
- Block
*.facebook.comvia an ad blocker
Microsoft / Bing opt-out
- Use Microsoft's privacy choice tool to opt out of personalised advertising
- Block
*.bat.bing.comand*.clarity.msvia an ad blocker - Delete Microsoft cookies (
_uetsid,_uetvid,MUID) from your browser
HubSpot opt-out
- Block
*.hs-scripts.com,*.hubspot.com, and*.hsforms.comvia an ad blocker - Delete HubSpot cookies (
hubspotutk,__hstc,__hssc,__hssrc) from your browser - Submit a data deletion request via the contact form — I will forward it to HubSpot within 5 business days
Browser-level controls
- Block third-party cookies in your browser settings
- Use a privacy-focused browser (Firefox, Brave, Safari) with enhanced tracking protection enabled
- Install an ad/tracker blocker such as uBlock Origin
Your rights
Your rights over your data
Under GDPR (if you are in the EU/UK) and comparable laws, you have the following rights. To exercise any of them, write to me.
Access
Request a copy of any personal data I hold about you.
Correction
Ask me to correct inaccurate or incomplete data.
Deletion
Request deletion of your personal data ("right to be forgotten"). I will comply within 30 days unless retention is required by law.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing of your data for any purpose.
Withdrawal
Withdraw consent at any time where processing is based on consent.
If you believe your rights have not been respected, you have the right to lodge a complaint with your national data protection authority.
Updates
Changes to this policy
This policy may be updated when the site changes substantially — for example, if a new form or third-party service is added. The "Last updated" date at the top of this page reflects the most recent revision.
I will not reduce your rights under this policy without notifying you.
Questions
Questions about this policy
If you have questions about this privacy policy or want to exercise any of your data rights, the fastest way is to use the contact form. I reply within two business days.
