Joshua Paul Design
Privacy Policy
What this website collects, what I do with it, and the choices you have.
Effective October 20, 2026
In short
- When you send me a message, I use what you tell me to reply and to talk about your project.
- The site uses Google Analytics to see how people use it. It doesn't use advertising cookies.
- I don't sell your information or put you on a mailing list.
- You can ask me to see, correct, or delete what I have about you.
What This Covers
Joshua Paul Design is my business. I’m Josh Miller, a web designer in Arvada, Colorado. This policy covers joshuapauldesign.com and the messages you send me through it.
The websites I build and manage for clients are covered by their own privacy policies.
What I Collect
What you send me. The contact form asks for your name, your email address, what you need help with, and a message. You can also add a phone number and your current website. If you email me, I get whatever you include in the email.
What comes with a message. When you send the form, the site also records the date, the page you sent it from, the first page you visited on the site, the website that sent you here (if any), your IP address, and your browser type. Your IP address is the number that identifies your internet connection. These details help me spot spam and tell me how people find the site.
What every visit sends. Each time you load a page, your browser sends basic technical information, such as your IP address, your browser and device type, and the page that linked you here. The companies that host and protect the site keep this in standard server logs. The analytics tools described below record how you use the site.
What I don’t ask for. The site doesn’t take payments and doesn’t have visitor accounts. Please don’t include health information in a message. I don’t need it to answer a question about your website.
How I Use It
To reply to you. I use what you send me to answer your message and to talk with you about your project.
To do the work. If we work together, I use your contact information to run the project, send invoices, and keep business records.
To keep the site running. The technical information helps me keep the site secure and filter out spam.
To improve the site. Analytics show me which pages people read and how they found the site, so I can make it better.
I don’t sell your information, rent it, or trade it. I don’t share it with anyone for their own marketing, and I don’t put inquiries on a mailing list. Outside the companies listed below, I would share information only if the law required it.
Cookies and Analytics
A cookie is a small file a website stores in your browser so it can recognize that browser later.
Google Analytics. The site uses Google Analytics to count visits and see how people use the site: which pages they read, how long they stay, how they arrived, what kind of device they use, and their approximate location, such as the city. It sets cookies named _ga and _ga_ followed by an ID, which last up to two years. Google Analytics doesn’t give me your name or email address.
Google can see visits to this site and to other websites that use its services. Google explains how it uses information from sites that use its services. You can turn Google Analytics off with Google’s opt-out browser add-on.
Cloudflare. Cloudflare protects the site from attacks and automated traffic. It may set a security cookie that helps it tell people from bots. The cookie doesn’t identify you. Cloudflare also counts visits and measures how fast pages load, without using cookies.
Browser storage. When you first arrive, the site saves the page you landed on and the website that sent you in your browser’s local storage. It stays in your browser for 30 days. It reaches me only if you send the contact form.
Nothing for advertising. The site doesn’t use advertising cookies or tracking code from ad networks or social media sites.
Companies That Help Run the Site
A few companies help me run this site. Each one handles information to provide its service and follows its own privacy policy.
WP Engine hosts the site and stores the messages sent through the contact form.
Cloudflare protects the site and delivers its pages.
Google provides Google Analytics.
Adobe provides the site’s typefaces through Adobe Fonts. Your browser requests the fonts from Adobe, which sees your IP address in order to send them. Adobe says it doesn’t set cookies or store your IP address when it serves fonts, and it uses the requests to deliver the fonts and to pay the companies that design them.
Brevo sends the site’s emails, such as the copy of your message and my automatic reply to you.
Google also provides my email through Gmail.
These companies may process information in the United States and in other countries. Their privacy policies are on their own sites: WP Engine, Cloudflare, Google, Adobe Fonts, and Brevo.
How Long I Keep It
I keep messages and emails as long as they’re useful: for our conversation, for any work that follows, and for my business records. When I no longer need something, I delete it. If we work together, I keep invoices and similar records as long as tax law requires.
Analytics reports are totals, such as how many people read a page in a month. Google Analytics deletes the detailed visit data behind them after 14 months.
Your Choices
Cookies. You can block or delete cookies in your browser’s settings.
Analytics. You can stop Google Analytics from recording your visits with Google’s opt-out browser add-on, or with a browser or extension that blocks tracking.
Do Not Track and Global Privacy Control. Some browsers send these signals to ask websites not to track you. There’s no agreed standard for how a website should respond to Do Not Track, and this site doesn’t change what it does when it receives either signal. It doesn’t sell your information or use it for advertising, which is what these signals mostly exist to stop.
Your information. You can ask me what information I have about you, ask me to correct it, or ask me to delete it. To make a request, send me a message and include the email address you used before, so I can find what I have. I’ll take care of it from there. If we’ve worked together, I may need to keep some records, such as invoices, for tax purposes.
Client Websites and Patients
I build and manage websites for other businesses, including medical practices. Those websites belong to the businesses that run them, and each one has its own privacy policy covering what you send through it.
If you’re a patient of a practice I work with, contact the practice directly about appointments, records, or billing. I can’t help with those, and please don’t send health information through this site.
Children's Privacy
This site is for businesses. It isn’t meant for children under 13, and I don’t knowingly collect information from them. If you think a child has sent me information, let me know and I’ll delete it.
Security
The site uses an encrypted connection, runs on managed hosting, and sits behind Cloudflare’s security network. I keep its software up to date. No website can promise perfect security, which is one more reason I collect only what I need.
Changes to This Policy
If I change how the site handles information, I’ll update this page and the date at the top. The version on this page is always the current one.
How to Reach Me
For questions about this policy, or to see, correct, or delete your information, send me a message through the contact form. Choose “Something else” and tell me what you need.
Joshua Paul Design
Arvada, Colorado
Privacy requests
Want to see, correct, or delete what I have about you? Send me a message and I’ll take care of it.