What I do with your information.
Short version: I collect the least I can, I use it for the thing you asked me to do, and I don't sell it. The longer version is below, in plain language.
What I collect
Three forms on this site ask for information, and they only ask for what they need:
- The contact form takes your name, email, organization (optional), what your message is about, and the message itself.
- The Four Spaces worksheets page takes your first name, last name (optional), nonprofit organization (optional), and email.
- The newsletter signup takes your email address and nothing else.
The site also uses Google Analytics, which collects the ordinary web analytics things: pages visited, roughly where in the world you are, what kind of device and browser you used, and which site sent you here. I look at it in aggregate — which essays get read, whether anyone finds the book page. I don't try to work out who you are from it, and it isn't connected to the forms above.
Why I collect it
To reply to you. To send you the worksheets you asked for. And to send you Letters from the Front Porch, if you asked for that.
That last one only happens if you click a confirmation link. Entering an email address in a form on this site does not put it on the list — a second click does. That's deliberate, so nobody ends up subscribed because a colleague typed their address on a shared laptop.
Who else touches it
I keep this list short on purpose, and it's the actual list, not a generic one:
- Railway hosts the site and stores the database, which is where subscriber addresses and download requests live.
- Resend delivers the email — confirmations, the worksheets, the letters, and your contact-form message to my inbox.
- Google Analytics provides the traffic statistics described above.
- Cloudflare Turnstileruns the “are you a person” check on the newsletter form. It exists because this site got hit by a signup bot flood, and it replaced the alternative, which was turning the form off.
- Google Fonts serves the typefaces, which means your browser requests a file from Google when a page loads.
- Calendly runs the scheduling page, if you book a call. What you type into their form goes to them.
The newsletter itself doesn't run on a third-party mailing platform. The list is a table in this site's own database, which is a small amount of extra work for me and one fewer company holding your address.
What doesn't happen
I don't sell your information. I don't share it for advertising, I don't hand it to data brokers, and I don't upload email lists to ad platforms to build audiences. There's no advertising on this site.
Amazon links
The links to buy the book are Amazon Associates links, so if you buy through one I earn a small commission at no cost to you. Amazon can tell that the click came from here. It's the same book at the same price either way.
Leaving, and getting your information deleted
Every letter I send has an unsubscribe link in the footer. One click and you're off — no confirmation step, no “are you sure.” If something about that doesn't work, tell me and I'll do it by hand.
If you'd like me to delete what I have about you — a contact message, a download request, a subscriber record — email me@toddhiestand.comand ask. You don't need to give a reason.
Changes
If I add or drop one of the services above, I'll update this page. The date below is when it last changed.
Effective October 28, 2026
Questions about any of this? Get in touch.