Jay Schulman.Plan for Thursday

Privacy Policy

Last updated: July 26, 2026

I’m not going to do that to your data

I read Michael Bazzell’s Extreme Privacy and it changed how I handle my own information. Aliases. Trusts. A phone number that isn’t tied to my name.

I don’t want my data laundered, sliced, diced, and grilled to perfection. So I’m not going to do that to yours.

In practice: no ad networks, no data brokers, nobody buying your email from me. The analytics run on a server I own, not Google’s. You haven’t seen a cookie banner here because there’s essentially nothing to consent to.

One exception, and I’ll own it. If you’re on my newsletter, I can see whether you opened it and whether you clicked. That’s how I learn which pieces are worth writing more of.

That’s about it. The rest of this page is the same thing, said carefully.

What I Collect

When you subscribe or download something

Your email address, and your name if you give it to me. If you complete the career assessment, your answers and the resulting score go with it. This is stored in Kit (formerly ConvertKit), which sends the newsletter on my behalf.

Kit records whether you open an email and whether you click a link in it. I use that to judge which topics are worth pursuing. Every email has an unsubscribe link, and using it ends this immediately.

When you just read the site

Page views are counted by Umami, an open-source analytics tool running on a server I operate. Your visit isn’t handed to a third-party analytics company, because there isn’t one involved.

Umami sets no cookies and produces aggregate counts only — pages, referrers, rough country, browser type. It honors your browser’s Do Not Track setting. There’s no profile of you in it, because it has nothing to build one from.

When something breaks

The site reports its own errors to PostHog so I find out when a page breaks. What’s in a report: the error message, the line of code, the path you were on. Not what you typed. Not the query string.

PostHog here is configured for errors and nothing else. Session recording is off. Click and form tracking is off. It stores no cookie and nothing in local storage, and it builds no profile of you. Close the tab and it has forgotten you.

Proof of Humanity

If you verify with World ID, I receive an anonymous cryptographic proof that a unique human completed the check. It can’t be traced back to you, and I never see your biometrics or your World ID identity.

What I Don’t Do

  • I don’t sell, rent, or trade your information. Not to anyone, at any price.
  • I don’t run advertising, ad networks, or retargeting pixels.
  • I don’t load Google Analytics, Meta pixels, or third-party trackers.
  • I don’t buy contact lists or add people who didn’t ask to be added.
  • I don’t track you across other sites, because I have no way to.

Cookies

This site sets no advertising or analytics cookies. That’s the reason there’s no consent banner — there’s nothing meaningful to ask you about. If that ever changes, the banner appears and this section changes with it.

Who Else Handles Your Data

Running a site means a few companies necessarily touch some of it. This is the complete list:

  • Kit — stores subscriber emails and sends the newsletter. Their privacy policy.
  • PostHog — receives error reports only. Their privacy policy.
  • The hosting provider for the server this site runs on, which handles network traffic the way any host does.

Analytics is deliberately not on that list. It runs on my own infrastructure.

How Long I Keep Things

Subscriber information stays until you unsubscribe or ask me to delete it. Aggregate analytics are deleted after 13 months. Error reports age out separately, and neither contains information intended to identify you.

Your Rights

Depending on where you live, you may have a legal right to access, correct, delete, or export your personal information, or to object to how it’s handled. In the EU or UK that’s the GDPR. In California, the CCPA and CPRA.

I’ll honor those requests wherever you live. Email me and I’ll take care of it. Practically speaking the only thing I hold is your newsletter subscription, so “delete everything you have on me” is a short job.

Security

I’ve spent my career in security, so I’ll be straight with you. No site is perfectly secure. Anyone who tells you otherwise is selling something. What I can do is keep the attack surface small and hold as little of your data as possible, which is the same reason I don’t collect much in the first place. The data you never hand over can’t leak.

Children’s Privacy

This site is written for working professionals and isn’t directed at children under 13. I don’t knowingly collect their information. If you think a child has sent me something, email me and I’ll delete it.

Changes to This Policy

If I change what I collect, I’ll update this page and move the date at the top. For anything significant I’ll say so in the newsletter, rather than quietly editing the page and hoping you don’t notice.

Contact

Questions about any of this, or a request about your own data:

Jay Schulman
Email: [email protected]
LinkedIn: linkedin.com/in/jschulman