Noah M. Kenney
Get in touch
Privacy — Plain language

A practical, honest privacy policy.

This site is run by a Certified Information Privacy Manager. The policy below reflects what is actually collected, why, who else sees it, and how to make it stop. No dark patterns, no boilerplate filler.

Effective 29 April 2026 Last updated 29 April 2026 Version 1.0

01Who is responsible

This website, noahkenney.com, is operated by Noah Kenney Enterprises, LLC (the “controller”), a Georgia limited liability company based in Atlanta. Noah M. Kenney, CIPM, is the named privacy contact and is reachable directly at the address in Section 12.

02What is collected

This site collects the minimum information needed to keep it online and to understand, in aggregate, which pages people read.

Analytics (Google Analytics 4)

When you load a page, a small amount of information is sent to Google Analytics 4:

  • The page you visited and the previous page that referred you
  • Your approximate location (country, region, sometimes city — derived from your IP address, then discarded)
  • Your device type, operating system, browser, language, and screen size
  • How long you stayed and how you scrolled or clicked
  • A randomly generated identifier stored as a first-party cookie (_ga) so repeat visits within a session are not double-counted

Google Analytics 4 does not log full IP addresses on this property. The IP is used briefly to derive geography and is then discarded by Google before storage.

Server logs

The web server (cPanel / Apache) keeps standard access logs that include your IP address, timestamp, requested URL, response code, and user-agent. These are retained for short-term operations and security — spotting abuse, debugging, etc. — and are not analyzed or shared.

What is not collected

  • This site has no contact forms, no newsletter signup, no account system, and no comments
  • No advertising trackers, social pixels, retargeting tags, fingerprinting libraries, or session replay
  • No payment data — nothing is sold from this site
  • No special category data (health, race, religion, etc.) is requested or collected

If you reach out by email, phone, or LinkedIn, that conversation lives in those services under their own privacy terms, not on this site.

03Why it is collected

The analytics data is used to answer two questions: which writing and research is being read, and whether the site is fast and working on the devices people actually use. That is the entire purpose. The data is not sold, traded, used to build a profile, or used for advertising.

04Third parties

The third parties that receive any data from this site are listed below in full:

Google LLC
Google Analytics 4 (analytics processor) — privacy policy
Google Fonts
Hosted web fonts (Instrument Serif, Geist, JetBrains Mono). Loading the fonts sends your IP and user-agent to Google to deliver the file.
Hosting provider
The site is hosted on a shared cPanel server. The host has access to the same standard server logs described above.

That is the complete list. There are no other CDNs, no analytics SDKs, no embedded third-party widgets.

For visitors in jurisdictions that require a legal basis (EU/EEA, UK, and similar):

  • Server logs — legitimate interest in keeping the site online and secure (Art. 6(1)(f) GDPR)
  • Google Analytics — legitimate interest in understanding aggregate readership. If you would prefer not to be measured, you can opt out at any time using the controls in Section 7

A formal consent banner is not currently used. If you visit from the EU/EEA or UK and would like the site to honor a stricter consent default, please email the address in Section 12 and a banner with Consent Mode v2 will be added.

06Retention

Analytics
Google Analytics 4 retains user-level and event data for 14 months on this property, after which it is deleted automatically. Aggregate reports are kept indefinitely.
Server logs
Rotated by the hosting provider, typically within 30 days.
Email correspondence
Held only as long as needed to respond, plus a reasonable archive for business records.

07Your rights

Regardless of where you live, you can:

  • Opt out of Google Analytics — install Google’s Analytics Opt-out Browser Add-on, enable Do Not Track or Global Privacy Control in your browser, or use any standard tracker blocker. This site honors them.
  • Block all cookies from this site in your browser — the site will continue to function normally
  • Email a request for access, correction, or deletion of any data you believe is held about you (see Section 12)

08California (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know what personal information is collected, used, shared, or sold
  • Delete personal information held about you, with limited exceptions
  • Correct inaccurate personal information
  • Opt out of the “sale” or “sharing” of personal information
  • Limit use of sensitive personal information
  • Not be discriminated against for exercising these rights

This site does not sell or share personal information for cross-context behavioral advertising. There is therefore no “Do Not Sell or Share” mechanism to enable, but if your interpretation differs, email the address in Section 12 and the request will be honored.

09EU / UK (GDPR)

If you are in the EU, EEA, or United Kingdom, you have the rights described in Articles 15–22 of the GDPR (and the equivalent UK GDPR): access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, email the address in Section 12.

The controller has not appointed a Data Protection Officer because the processing here does not meet the GDPR thresholds requiring one. Noah M. Kenney, CIPM, serves as the privacy point of contact.

Transfers

Google Analytics processing involves the transfer of data to the United States. Google relies on the EU-US Data Privacy Framework and on Standard Contractual Clauses for international transfers; their current terms are linked in Section 4.

10Children

This site is not directed to children under 13 (or under 16 in jurisdictions where that is the applicable threshold). No information is knowingly collected from children. If you believe a child has interacted with this site in a way that requires action, email the address in Section 12 and the data will be deleted.

11Changes to this policy

This policy will be updated when the site’s practices change — for example, if a contact form is added, or if a new analytics or hosting provider is brought on. The version number and “Last updated” date at the top of the page reflect the most recent change. Material changes will be reflected with an updated effective date; trivial fixes (typos, link updates) may not bump the version.

12Contact

For any privacy question, request, or complaint:

Email
info@noahkenney.com
Mail
Noah Kenney Enterprises, LLC — Atlanta, GA, USA
Privacy contact
Noah M. Kenney, CIPM

Requests are typically acknowledged within one business day and resolved within 30 days, in line with GDPR and CCPA timelines.