Privacy Policy

Privacy, please!

Who I am

I am Kelly Carnahan, and you are viewing my portfolio, which contains work I’ve done while employed by an organization or as a freelancer. I’m considering putting some of my crafts on this site, too. Oh, joy! I can feel your excitement.

My web address is: https://kellycarnahan.com. But you probably know that because somehow, you got here.

For the most part, I have features like comments, media, logins, and accounts turned off for everyone but me. But let’s say I’ve made a mistake and there are some holes. This policy should explain what happens in those situations. Even though features are limited, there are still some risks. Please read through the entire policy, and I’ll do my best to answer your questions via my contact form.

Comments

When visitors like you leave comments on the site, and to reiterate, you (and they) shouldn’t be able to, I collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to my website, and you shouldn’t be able to, you should avoid uploading images with embedded location data (EXIF GPS) included. It’s all fun and games until you upload images with embedded location data. Then all the sorrys in the world can’t make it better. So don’t. Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on my site, and you shouldn’t be able to, you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for 30 days.

If you visit my login page, (you know the drill now, right? Please don’t visit my login page.) I will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, (please don’t) I will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, (again, please don’t…) an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

I use a service called Matomo to analyze user behavior. Some of your information is stored in first party cookies and then collected by Matomo:

  • Random unique Visitor ID
  • Time of the first visit for this user
  • Time of the previous visit for this user
  • Number of visits for this user

You can opt out of your information being included. The opt-out is at the bottom of this page.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who I share your data with

If you request a password reset, your IP address will be included in the reset email. But seriously, you shouldn’t have a login and password to my site.

How long I retain your data

I have comments turn off on this site because I really don’t want your comments. My internal voices are judge-y enough. I don’t also want to hear yours.

If you somehow manage to break through and leave a comment, the comment and its metadata are retained indefinitely. This is so I can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. I will probably not approve your comments. In fact, I can almost guarantee I will trash them as soon as I discover them. However, I will agonize about them forever.

For users that register on my website (you shouldn’t be able to, but if, for example, you’ve hacked my site… ), I also store the personal information provided in a user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

God forbid you have any data on my site. To be clear — I really don’t want it. This is a family show. Keep that shit to yourself.

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data I hold about you, including any data you have provided to me. You can also request that I erase any personal data I hold about you resulting from using this site. This does not include any data I am obliged to keep for administrative, legal, or security purposes.

If I hold personal data about you resulting from something else — for example, if you sent me a piece of snail mail or a lovely card for my birthday — you can request a copy, but I can’t promise that I’ve still got it. I throw that shit away pretty quickly.

Where your data is sent

Visitor comments may be checked through an automated spam detection service if you, in fact, break through and figure out how to leave a comment against my wishes. If you can, you might’ve hacked my site. We have bigger fish to fry.

Finally, here’s how you opt-out of having your actions analysed…

(This is the Matomo service I mention above in the Cookies section)

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

GDPR