Last updated November 7, 2026

Privacy

This is a one-person website. Here's what it collects, why, and who else handles it. If anything here is unclear, ask me.

The short version

• I collect what you type into a form, plus a small amount of traffic data.
• Asking for a free guide gets you the guide. It doesn't put you on my newsletter unless you tick that box.
• I don't sell your information, and I don't share it with advertisers.
• The site's own analytics don't use cookies.
• You can ask me to delete your information at any time.

What you give me

When you fill in a form (the consulting form, the contact form, the music early-access list, the newsletter, or a free guide), I store what you entered: usually your name, email address and message. I also store which page the form was on, any UTM tags in the link that brought you here, and a one-way hash of your IP address. The hash lets me spot spam floods without keeping your actual IP address.

I use this to reply to you, send you what you asked for, and understand which pages are worth keeping up.

Free guides

When you ask for a field guide, I record the request: your email address, your first name if you gave one, which guide you asked for, whether you ticked the newsletter box, the page and UTM tags, and the IP hash. I also note which kind of guide it was (the general AI guide or the independent artist guide), so if I write something later that's specifically for one of those groups, I know who asked about that topic.

Then I send you one email with the PDF. That email is a delivery, not a subscription. The download link in it is tied to the guide you asked for. The longer-lasting link contains a coded copy of your email address, so it can only be used for your request. Please don't post it publicly.

If you're already on my newsletter when you ask for a guide, I add a note to your existing record about which guide you asked for. Your subscription status doesn't change.

The newsletter

You're on my newsletter only if you signed up for it, or ticked the newsletter box on a form. That box is never ticked for you. Every newsletter has a one-click unsubscribe link, and you can also unsubscribe on the unsubscribe page. Unsubscribing takes effect straight away. I won't add you back unless you sign up again yourself, and asking for a guide later doesn't re-subscribe you.

Who else handles your information

• Supabase hosts the database where form submissions, guide requests and the email list are stored, and the private file storage the guide PDFs are delivered from.
• Resend sends email for this site. It processes your email address to deliver messages, and tells me when a message bounces or is marked as spam so I can stop sending to that address.
• Vercel hosts the site. Like any host, it processes request data such as IP addresses to serve pages. I also use Vercel Web Analytics, which counts visits without cookies.
• Cloudflare Turnstile may run on forms to check that you're a person, when it's switched on. It looks at signals from your browser to do that and doesn't use them for advertising.
• Stripe handles payment if you ever buy something here. Your card details go to Stripe directly and never touch my servers. I receive your name, email and what you bought.

These companies are based in the United States. Only I can read the data in my accounts.

Analytics

This site counts page views with its own first-party analytics. It records the page, the referring site, any UTM tags, your country, and a visitor fingerprint hashed with a salt that changes every day. That means I can count unique visitors per day, but I can't follow you across days or identify you. No cookies are set for this.

Spam protection

Forms use a hidden field and a short timer to catch bots, and a limit on how many times one connection can submit in an hour. Submissions that look automated are set aside and not acted on.

How long I keep it

I keep form submissions, guide requests and list signups until you ask me to delete them, or until they're no longer useful to me, whichever comes first. Aggregate page-view counts are kept indefinitely.

Seeing or deleting your information

To see or delete what I hold about you, send a note through the contact form or email hello@zackmassey.com from the address you used. I'll delete it from the list, the form and guide records, and anything I've exported, and tell you when it's done. If you only want fewer emails, the unsubscribe link at the bottom of any newsletter is faster.

Kids

This site isn't meant for anyone under 16, and I don't knowingly collect information from them.

Changes

If this policy changes in a way that matters, I'll update the date at the top. If it changes how I use your email address, I'll tell the list.