Last updated: 15 October 2026
Who I am
This website, https://andyfrost.xyz, is run by Andy Frost. I am responsible for the personal data collected through it. You can contact me about anything in this policy through the Say hello page.
What I collect and why
Contact form
If you use a contact form on this site, I receive your name, email address and message by email so that I can reply to you. The legal basis is my legitimate interest in answering your enquiry. The form does not save your message on the website. The email is delivered through my email provider, GMX. I keep these emails for 12 months, then delete them.
Comments
Where comments are open, the site stores the name, email address and comment you enter, together with your IP address and browser details. Comments are checked for spam by Akismet, a service run by Automattic. An anonymised string created from your email address (a hash) may be sent to the Gravatar service, also run by Automattic, to see whether you have a profile picture. Comments and their details are kept so that follow-up comments can be recognised.
Visitor statistics
I use Google Analytics, through Google Site Kit, and Jetpack Stats to understand how many people visit the site and which pages they read. These services receive information such as your IP address, the pages you view, the site that referred you, and your browser and device type. Google Analytics only runs if you click Accept on the cookie banner. Until then nothing is sent to Google Analytics. Once you accept, it uses cookies (see Cookies below). Google’s privacy policy is at https://policies.google.com/privacy and Automattic’s is at https://automattic.com/privacy/.
Images and security
Images on this site are delivered through Jetpack’s image service, run by Automattic, so your browser connects to its servers to load them. To protect the site from attacks, Jetpack and the Limit Login Attempts plugin record the IP addresses of attempts to log in. The web server also keeps standard access logs, including IP addresses, for security and troubleshooting.
Cookies
- If you accept analytics on the cookie banner, Google Analytics sets cookies whose names start with
_gato tell visits apart. They last for up to two years. If you reject, they are not set, and any left from an earlier visit are removed. - Your choice on the cookie banner is remembered in a cookie called
af_consentfor six months. You can change it at any time with the Cookie settings link at the bottom of every page. - If you leave a comment, you can choose to save your name and email address in cookies so that you do not have to type them again. These last for one year.
- Login cookies are only set for the site administrator.
Who I share your data with
I do not sell your data. It is only shared with the service providers named above (Google, Automattic and GMX) and with the company that hosts the website, so that the site can run. Some of these providers may process data outside the European Economic Area, under safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
Your rights
Under the General Data Protection Regulation (GDPR) you can ask for a copy of the personal data I hold about you, ask me to correct or delete it, object to how I use it, or ask me to restrict its use. To do any of these, contact me through the Say hello page. If you are unhappy with how your data has been handled, you can complain to the Data Protection Commission in Ireland (https://www.dataprotection.ie).
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new date.