Privacy Policy

This site, dcrader.dev, is operated by Donovan Crader, a sole proprietor (freelance web developer) based in San Diego, California. This policy explains what personal information I collect, why I collect it, who I share it with, and the choices you have — in plain English, without the legalese.

If anything here is unclear, email me at dcraderdev@gmail.com and I'll answer directly.

I keep data collection to the minimum needed to run my business. Specifically:

• Contact form submissions. When you fill out my contact form, I collect the email address you provide, plus anything you choose to type into the message (your name, your business, what you're looking for).
• Billing information. When you pay an invoice or buy a service, payment is handled by Stripe. Stripe collects your card details directly — I never see or store full card numbers. I receive only confirmation of payment and basic receipt metadata (amount, date, last four digits).
• Cold-outreach prospect data. For businesses I reach out to, I collect publicly listed business contact information. See Cold-outreach prospect data below for the full detail.
• Basic technical data. Like most websites, my hosting provider logs standard request data (IP address, browser type, pages visited) for security and operations. I don't use this to build advertising profiles.

• To reply to you when you contact me and to discuss potential work.
• To deliver services you've hired me for and to process payments.
• To reach out to local businesses about accessibility issues I've found on their public websites (cold outreach).
• To keep the site secure, online, and working.
• To meet legal and tax obligations (e.g., keeping invoice records).

I do not sell your personal information, and I don't use it for third-party advertising.

Part of how I find clients is cold outreach, so I want to be straightforward about it.

I gather publicly available business contact information from public sources — business listings on Yelp and Google Places, and the businesses' own public websites (including contact email addresses published on those sites). I use this to identify local businesses whose websites have accessibility problems, and I email them about what I found.

This data is about businesses and the contact details those businesses have chosen to publish publicly. I don't buy lists, I don't scrape private accounts, and I don't collect sensitive personal information.

If you received an email from me and want out, see Removing yourself from outreach, or read the full Cold Outreach Notice.

• Contact submissions: kept while we're in conversation and for a reasonable follow-up period, then deleted on request or when no longer needed.
• Client and billing records: kept as long as needed to deliver the work and to meet tax and accounting requirements (typically several years).
• Prospect data: kept while a business is an active outreach prospect. If you opt out, your record is marked do-not-contact and removed from active outreach.

You can ask me to delete your information at any time — see Your rights.

I don't sell your data. I do rely on a small set of trusted service providers (“subprocessors”) to run the business. Each only receives what it needs to do its job:

• Supabase Database — stores contact submissions and prospect records
• Stripe Payment processing — handles card data; I never see or store full card numbers
• Resend Transactional and outreach email delivery
• Vercel / Netlify Website hosting and serving
• Google Cloud (Places API) Looking up public business listings
• Yelp (Fusion API) Looking up public business listings

I may also disclose information if required by law (e.g., a valid legal request) or to protect my rights and safety.

Because I operate in California, California residents have specific rights under the California Consumer Privacy Act (CCPA/CPRA). Regardless of where you live, I'll honor these for anyone who asks:

• Right to know / access — ask what personal information I hold about you.
• Right to delete — ask me to delete your personal information.
• Right to correct — ask me to fix inaccurate information.
• Right to opt out — opt out of any sale or sharing of personal information (see below — I don't sell, but you have the right regardless).
• Right to non-discrimination — I won't treat you differently for exercising any of these rights.

To exercise any right, email dcraderdev@gmail.com. I may need to verify your identity before acting on the request, and I'll respond within the timeframes required by law.

Because I don't sell or share personal information in the way the CCPA defines those terms, there's nothing to opt out of on that front. If that ever changes, I'll update this policy and add a clear opt-out mechanism. To confirm your preferences or ask a question, email dcraderdev@gmail.com.

I keep cookies minimal. I don't use marketing or advertising cookies, and I don't run third-party ad trackers. Any cookies in use are essential — for example, a session cookie needed for secure areas of the site to function. You can block cookies in your browser settings, though some features may not work as expected.

I use reputable providers (listed above) and reasonable safeguards to protect your information. No method of transmission or storage is 100% secure, but I take protecting your data seriously and limit access to what's necessary.

If you received a cold-outreach email from me and don't want any more, you have three easy options:

• Reply to the email with STOP.
• Click the unsubscribe link at the bottom of the email.
• Email dcraderdev@gmail.com and ask to be removed.

Any of these adds you to my do-not-contact list. I honor opt-outs and won't email you again. More detail is in the Cold Outreach Notice.

This site and these services are for businesses and adults. I don't knowingly collect personal information from children under 13. If you believe a child has provided information, contact me and I'll delete it.

I may update this policy as my business or the law changes. When I do, I'll post the new version here with an updated effective date. The version shown at the top is always the current one.

Questions, requests, or concerns about privacy:

Donovan Crader
Sole proprietor — San Diego, California
dcraderdev@gmail.com