01 · Plain EnglishThe short version.
jonrezin.com uses a small number of cookies and similar browser-storage technologies (localStorage, sessionStorage). They exist to make the site work properly, remember your preferences, attribute marketing visits, and gather aggregate analytics. We don't use advertising cookies, don't sell your data, and don't track you across the internet.
02 · What we useThe list.
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
adm_sid | Admin login session (only set if you sign in to the admin panel) | Strictly necessary | 30 days |
utm_first / utm_last (localStorage) | Marketing-attribution: which campaign or referrer brought you to the site, so we know what's working | Functional / Analytics | 30 days |
pagePath (sessionStorage) | Recent in-session page history, to give context when you submit a form | Functional | Session |
sessionStart (sessionStorage) | Session start timestamp for spam detection | Strictly necessary | Session |
PostHog cookies (e.g. ph_*) | Aggregate, privacy-respecting product analytics — page views, button clicks, no cross-site tracking | Analytics | Up to 1 year |
| Embedded-platform cookies (YouTube, Spotify, Apple Music, Cloudflare, etc.) | Set by third-party iframes when you interact with embedded media. Governed by those platforms' own privacy policies. | Third-party | Varies |
03 · Cookie consentYou're asked, not tracked silently.
We show a small banner the first time you visit, asking you to opt in to analytics. There are two choices:
- Accept — sets
cookieConsent_v1=alland lets PostHog product analytics initialize. PostHog runs with IP storage disabled, autocapture off, session recording disabled, and inputs masked. - Essential only — sets
cookieConsent_v1=essentialand PostHog never loads. Nothing about your visit is captured beyond the standard Cloudflare access log.
You can change your choice any time by clearing your browser's localStorage for jonrezin.com and refreshing. We also honor the Global Privacy Control (GPC) browser signal — if your browser sends Sec-GPC: 1, analytics never runs regardless of what you clicked, and we treat that as a verified opt-out under CCPA.
The cookies we do use fall into the "strictly necessary" or "legitimate interest" categories under GDPR / UK PECR. We don't run advertising or cross-site tracking cookies. The newsletter, contact, and work-with-me forms each require an explicit opt-in checkbox for marketing email — that's the only marketing consent we ask for.
04 · How to opt outYou're in control.
You can disable or clear cookies any time from your browser settings:
Chrome: Settings → Privacy and Security → Cookies and other site data.
Safari: Settings → Privacy → Manage Website Data.
Firefox: Settings → Privacy & Security → Cookies and Site Data.
Edge: Settings → Cookies and site permissions → Manage and delete cookies.
Some site features — including the admin panel and form submissions — depend on the strictly-necessary cookies. Disabling all cookies will limit those features but will not prevent you from reading the site.
To opt out of PostHog analytics specifically, visit posthog.com or enable your browser's "Do Not Track" setting — we honor it.
05 · Third-party platformsEmbedded media.
When you play an embedded YouTube video, Spotify track, or Apple Music preview on this site, those platforms set their own cookies under their own terms. We don't control those cookies. Platform privacy policies:
YouTube / Google · Spotify · Apple Music · Cloudflare · PostHog
06 · ContactQuestions?
See our privacy policy for full data-collection details, or email [email protected] for cookie-specific questions.