privacy policy
last updated: february 2026
overview
moonpath.dev is committed to your privacy. this site is a studio portfolio and blog. we do not require accounts, and we collect minimal data as described below.
this policy covers the moonpath.dev website. our individual projects have their own privacy policies tailored to their specific functionality:
data we collect
contact form
when you submit the contact form, your name (optional), email (optional), and message are sent to formspree for delivery. we do not store this data on our own servers. if you provide an email address, we may use it to reply to your message.
cookies
moonpath.dev uses minimal cookies:
- theme preference cookie (
moonpath_theme): stores your light/dark mode choice so it carries over across all moonpath.dev sites. set on the.moonpath.devdomain, contains only "light" or "dark", expires after one year. not used for tracking.
we do not use advertising cookies or tracking pixels. for full details, see our cookie policy.
data stored in your browser
local storage
your theme preference (light or dark mode) is saved in your browser's local storage so it persists between visits. this data stays on your device and is not sent anywhere.
analytics
we use google analytics 4 (ga4) and vercel analytics to understand how visitors use the site and improve the experience.
google analytics 4
ga4 collects:
- page and usage data: pages visited, time on page, scroll depth, browser type, device type, and operating system.
- interaction events: we track specific actions such as button clicks, navigation between moonpath projects (seasons, resonance), and link clicks. this helps us understand which features are used and where people encounter issues.
- outbound link clicks: when you click a link that leaves moonpath.dev (such as a ko-fi link or external resource), we record the click destination and context. we do not track your activity on the destination site.
- traffic source data: we record how you arrived at moonpath.dev, including the referring website (e.g., instagram, google, a direct link) and any utm campaign parameters in the url. this helps us understand which channels bring visitors to the site.
- approximate location: ga4 infers your approximate geographic location (city and country level) from your ip address. we do not see or store your ip address directly, google processes it and provides only aggregate location data.
ga4 uses cookies to distinguish unique visitors. you can opt out of google analytics by using the google analytics opt-out browser add-on. subject to google's privacy policy.
vercel analytics
vercel analytics is privacy-focused, does not use cookies, and does not collect personal data. it provides aggregate page view and performance metrics only. subject to vercel's privacy policy.
session storage
during your visit, traffic source information (referring website, utm campaign parameters, landing page) is stored temporarily in your browser's session storage. this data is automatically cleared when you close your browser tab or browser. it is used solely to attach traffic source context to analytics events and is not persisted between sessions.
data we do not collect
we do not collect, store, or transmit:
- personal information beyond what you voluntarily provide via the contact form
- any data used for advertising or profiling
third-party services
| service | purpose | data shared |
|---|---|---|
| vercel | hosting, analytics | anonymous usage data |
| google analytics 4 | usage analytics, interaction tracking | anonymous usage data, approximate location, traffic source |
| formspree | contact form | name, email, message |
| google fonts | font delivery | standard web requests |
| github | blog content management | admin access only |
formspree data retention
formspree retains contact form data per their privacy policy. to request deletion of form submissions, contact hello@formspree.io.
data subject access requests
to submit a data subject access request, email hello@moonpath.dev with "dsar request" in the subject. we will respond within 30 days.
automated decision-making
moonpath.dev does not use automated decision-making or profiling of users.
gdpr (european users)
if you are located in the european union, you have the right to access, correct, and delete any personal data we hold about you. since moonpath.dev collects minimal data (only via the optional contact form), this primarily applies to any contact form submissions. to exercise your rights, contact hello@moonpath.dev.
ccpa (california users)
if you are a california resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected. we do not sell personal information. to make a request, contact hello@moonpath.dev.
children's privacy
moonpath.dev is not directed at children under 13. we do not knowingly collect information from children under 13.
changes to this policy
we may update this policy from time to time. changes will be reflected by updating the "last updated" date.
contact
for privacy-related questions, email hello@moonpath.dev or use our contact form.