updated 2026-06-11
privacy policy
this site is a personal portfolio run by tyler richards out of atlanta, georgia. the short version: it collects as little as it can, keeps analytics cookieless until you opt in, and never sells anything. the long version is below.
who runs this
richards.foo (the site) is operated by tyler richards as an individual. for any privacy question, or to ask that data tied to you be removed, email tyler@tyler-richards.com.
what gets collected
analytics. the site uses google analytics 4 to count page views and see which pages get traffic. ip addresses are anonymized. until you press accept in the cookie prompt, analytics runs in google's consent-mode cookieless state: no analytics cookies are written and only coarse, aggregated pings are sent.
interactive features. the network and identity features (callsigns, trail claims, daily puzzles) store a small amount of state so the feature works across visits. that lives in your browser and in a supabase database keyed to an anonymous identifier, not to your name.
contact. if you send a message through the contact form, the name, email, and body you type are delivered to the inbox so a reply is possible. nothing more.
cookies and local storage
before consent, the only thing stored is your consent choice itself (a single localStorage key) plus any state needed for the interactive features you use. after you accept, google analytics sets its standard measurement cookies. decline and those are never set.
you can change your mind any time from the cookie link in the footer, or by clearing site data in your browser.
who processes the data
a few third parties make the site run. google analytics for traffic counts. supabase for the database behind the network features. netlify for hosting and edge delivery. resend for sending contact-form mail. each only sees what its job requires, and none of them get a list of who you are to sell.
what is never done
no selling or renting of data. no advertising profiles. no cross-site tracking pixels beyond the single analytics tag described above. no dark-pattern consent.
your choices
decline analytics and it stays cookieless. ask for deletion and anything tied to you gets removed. use a browser do-not-track or global privacy control signal and the site treats analytics as declined by default.
changes
if this policy changes in a way that matters, the date at the top moves and the new text replaces the old. continued use after a change means the current version applies. the terms of service cover the rest.