Joe GarraffoInvite Joe to speak

Privacy

This is a personal publication. There is no account to create, no form to fill in, and no mailing list. Nearly everything below is about one thing: measurement, and the fact that it stays off until you say otherwise.

What runs before you choose

Nothing that identifies you. The pages are static HTML and CSS. No analytics, no advertising tag, no social embed, and no third-party script of any kind loads until you have made a choice.

This is not a Consent Mode arrangement where the tag loads and then behaves differently. The tags are written into the page as inert placeholders that a browser will not fetch, and they are rewritten into real scripts only after a grant. If you decline, they are never requested at all.

What is held until you allow it

Two things, both in the Analytics category:

There is no Marketing category on this site, because there is nothing in it. No advertising pixels, no retargeting, no conversion tracking, no audience building, and nothing that follows you to another site.

The record of your choice

The consent banner is Consential, which I also own. When you choose, it writes a dated record so that the choice can be honored and, if it ever matters, evidenced. That record holds a random identifier, a one-way hash of your IP address rather than the address itself, the broad region that address resolved to, your browser user agent, and a timestamp. It is append-only: a later choice is added, never written over the earlier one.

Your choice is also stored in a first-party cookie on your own device so the banner does not ask again on every page.

This record is Essential and is not itself optional, for the ordinary reason that a site cannot remember that you declined without remembering something.

What happens regardless, and I would rather say so

The site sits behind Cloudflare, which sees the request before this site does — your IP address, the page requested, and your user agent — and uses it to route and to absorb attacks. The origin server keeps standard access logs for the same reason. None of that is consent-gated, because it is how the request reaches the page at all rather than a choice about measurement. It is not used to profile anyone and it is not combined with the analytics above.

What I do not do

Global Privacy Control

If your browser sends a GPC signal, it is honored automatically as an opt-out. You will not have to find the banner and do it by hand.

Changing or withdrawing your choice

Use the Privacy choices link in the footer of any page. It reopens the same panel and shows what is currently on. A withdrawal takes effect immediately: the scripts are not reloaded on the next page, and clearing what a third party has already collected is a request you make to that third party.

Requests about your data

Depending on where you live you may have the right to know what is held about you, to have it deleted, to correct it, or to opt out of sale or sharing — the last of which is already the standing position here, since nothing is sold or shared. Email [email protected] and say what you want. I will answer within 45 days, which is the outside limit the state statutes set and considerably longer than it will actually take.

Because the consent record deliberately holds a hash of an IP address rather than the address, and no name or email is ever collected, in most cases there is genuinely nothing here tied to you by name to produce. I will tell you that plainly rather than pretend a search happened.

Children

This site is written for adults working in marketing and medicine. It is not directed at children and I do not knowingly collect anything from anyone under 16.

Changes

If what the site collects changes, this page changes with it and the date below moves. A material change also resets the consent banner, so you are asked again rather than carried over on a choice you made about something else.


Last updated September 1, 2026.