Privacy

Updated October 9, 2026.

This notice explains how Dylan J. Harris uses information on this site. For a question or a request about your data, contact contact@dylanjharris.com through the contact page.

What you send

If you contact me, I use your name, email, and message to reply and discuss your project. Please do not send passwords, payment-card details, or sensitive personal records in an inquiry. I do not add inquiries to a marketing list.

Accounts and sign-in emails

Your email connects your account with your purchases, referrals, and points. Customers sign in with a one-time link, not a password. Google sign-in is separate and is used for authorized administrators.

Resend sends the requested sign-in email from login@accounts.dylanjharris.com. It processes your email address, the message and sign-in link, and delivery information. These are account emails; requesting a link does not subscribe you to marketing. We do not use open or click tracking for these emails. Resend can still keep message and delivery records under its data-processing terms.

A link expires after 15 minutes and works once. The site stores your email, a hash of the verification token, and its expiry time. The hash lets the site check a link without storing the working token in the database. A used token record is deleted. Unused expired records are removed when another sign-in link is created.

After sign-in, an essential browser cookie keeps you signed in. The customer session has a seven-day lifetime and can be renewed through account use. We also keep account timestamps and verification status. To limit repeated requests, the site stores hashed identifiers derived from email addresses and IP addresses, with request counts and timestamps. Hashing does not make this information anonymous. See the cookie notice for browser storage.

Payments

Stripe handles checkout and card details. The site keeps the order, payment status, and subscription details needed to provide the service; it does not store full card numbers.

Referrals and rewards

Your account keeps your service purchases, points history, referrals, and reward requests. Points follow verified payments and refunds. Your account dashboard is private. Access is limited to you and authorized administrators. Service providers process the underlying data as described below. If you share a referral, get that person’s permission first. Attio stores referral contact details and progress for project follow-up. The account shows only the referral label, status, and customer-facing note; internal CRM notes stay private. Adding a referral does not send a message or enroll anyone in marketing.

Public crypto wallets

The wallet addresses and QR codes are my public receiving addresses. The QR images are generated locally and served by this site; no external QR service is used. They do not connect to your wallet or ask for private keys. Crypto transfers are separate from Stripe checkout and account points.

If you send crypto, wallet addresses and transaction details may be visible on the public blockchain. Deleting a website account does not remove blockchain records.

Visits and cookies

The host processes request and security information, such as IP addresses and browser details, to serve and protect the site. Google Analytics loads only if you allow it. Account, sign-in API, and admin pages are excluded from this site’s analytics collection. You can withdraw your analytics choice in Cookie settings. See the cookie notice for details.

Service providers and other sites

Vercel hosts the website. Railway stores application data. Resend delivers customer sign-in emails; Attio stores referral records. Google and Stripe provide the services described above. These providers process data for their services and may process it in other countries. Google Search Console reports search visibility and does not add a visitor-tracking script to this site.

Some pages load third-party media or data, including YouTube, card catalogs, and linked project services. Playing an embedded video or visiting another site sends information to that provider. Its own privacy terms apply. I do not sell your contact details.

Retention and your choices

I keep information for the project, account, security, and record-keeping needs it serves. Retention depends on those needs and any legal duties; I do not promise one deletion date for all records. You can request a copy of your information, a correction, or deletion through the contact page. I may need to verify that the request comes from you. Some payment or business records may need to remain. Signing out removes the session from that browser; it does not delete your account or records.

Private journal notes and restricted tools are not public content. Access controls limit who can see them. No internet service can promise absolute security.

Changes

I will update this notice when the site’s data practices change. The date above shows the latest revision.