Privacy Policy
Last updated: November 5, 2026
This notice describes privacy practices associated with the Site as it currently operates, including third-party services used to provide its content.
1. Scope and acknowledgment
This Privacy Policy describes certain data practices associated with andrewmcavallo.com (the “Site”), operated by Andrew M. Cavallo (the “Operator”). By accessing or using the Site, you acknowledge this Policy and, to the extent such agreement is legally effective, agree to it and the Terms of Use. Access or use does not waive statutory privacy rights or replace any separate consent required by applicable law.
2. Information associated with access and use
When you use the Site, hosting, network, security, and analytics providers may process technical information such as IP address, approximate location derived from network data, browser or device information, requested pages, referrers, timestamps, and diagnostic or security events. The Operator may receive aggregated or other reporting made available by these providers. When you voluntarily send an email or other communication, the Operator may receive and retain the contact details and information you provide, along with correspondence and related records. The Site does not currently operate its own mailing-list signup form or direct payment checkout. A later addition of such a feature would require corresponding disclosure and any permissions required by law.
3. Hosting, analytics, fonts, media, and purchases
The Site uses Cloudflare for delivery, security, and analytics. Cloudflare Web Analytics is designed to provide website measurements without using analytics cookies or fingerprinting visitors for that purpose; Cloudflare’s other network and security functions may involve separate processing. Pages may request fonts from Google Fonts. Some pages embed video players from Rumble, which can receive information about users and may use cookies or similar technologies under its own policies. Purchase links lead to Gumroad, where payment, purchase, account, and fulfillment information is handled under Gumroad’s terms and privacy policy. Email correspondence may be processed by the relevant email service providers. The Operator does not control the independent practices of those third parties.
4. Purposes and lawful handling
Information made available to the Operator may be used as reasonably necessary to operate, secure, troubleshoot, and improve the Site; understand aggregate usage; respond to voluntary communications; administer rights and permissions; address suspected abuse or infringement; and satisfy legal requirements. Information may be disclosed to service providers, professional advisers, or authorities when reasonably necessary for these purposes, to protect legal rights, or as permitted or required by law. This description does not authorize any processing prohibited by applicable law.
5. Cookies and external websites
The Operator does not currently deploy a separate first-party advertising or newsletter-tracking system through the Site. Cloudflare Web Analytics itself is designed to operate without cookies. Other services involved in loading the Site, including security functions, embedded media, external font resources, and external purchase pages, may use cookies or related technologies according to their own practices. Following external links or using embedded third-party services may subject you to their respective privacy notices and policies.
6. Retention, security, and location
Technical records and voluntarily supplied communications may be kept for periods appropriate to the purposes above, operational needs, disputes, protection of rights, and applicable legal requirements. Retention and deletion practices of independent third-party providers are governed by their respective systems and obligations. Data may be processed in the United States or other jurisdictions where the Operator or relevant providers operate. No method of electronic transmission, storage, or security can be guaranteed absolutely secure, and no such guarantee is made. Statutory requirements regarding safeguarding or reporting information remain unaffected.
7. Privacy rights and requests
Depending on applicable law and the circumstances, you may have rights to request access to, correction or deletion of, or other actions concerning personal information held by the Operator. Requests may be sent to [email protected]. Requests may be subject to reasonable identity verification, lawful exceptions, and the limits of information actually controlled by the Operator. Third-party services should be contacted directly concerning information they control. Nothing in this Policy limits rights or obligations that cannot lawfully be waived.
8. Children
The Site is a general-interest collection of writing and creative work and is not directed to children under thirteen. The Operator does not intentionally solicit personal information from children under thirteen. Applicable laws governing minors’ information control to the extent they apply.
9. Revisions
The Operator may revise this Policy as services and practices change. Updated versions will appear on this page and take effect as permitted by applicable law. Any additional notice or consent required by law will govern. This Policy does not create contractual warranties, service commitments, or rights beyond those provided by applicable law.