Privacy Policy

Last updated: September 12, 2025

1. Overview

This website, joshuaeastman.dev, is a personal portfolio site created and maintained by Joshua Eastman. It also hosts small demonstration APIs: Quotes API (public read) and Bookmarks API (public read + anonymous, moderated submissions), along with demo pages for trying them out.

2. Cookies & Tracking

• No analytics / ad tracking: This site does not use analytics beacons, advertising pixels, or third-party tracking cookies.
• Functional cookie (CSRF only): When using forms (e.g., the Bookmarks submission demo), the site may set a CSRF cookie strictly for security. It does not track you across pages and contains no personal profile or advertising identifier.

3. Information Processed When You Use the APIs

When you use the Quotes API or Bookmarks API, the server processes standard request metadata (e.g., IP address, browser/user-agent, timestamps, and request path) to deliver responses, enforce rate limits, and protect the service from abuse. No end-user accounts are created and no personal profile is built from API usage.

3.1 Bookmarks API Submissions

• Data you provide: title, URL, description, and tags for the bookmark you submit.
• Moderation context: the submission is stored for review and is not public until approved.
• IP address: the submitter’s IP address may be recorded with the submission for abuse prevention and security.
• Honeypot field: the submission form includes a hidden “honeypot” field to deter automated spam; values entered there may be treated as spam signals.

4. Contact Form & reCAPTCHA

If you use the contact form, you may voluntarily provide your name, email address, and message. This is sent by email to the site owner and is not stored in a database beyond normal email retention.

To prevent spam and abuse on the contact form, this site may use Google reCAPTCHA. reCAPTCHA may collect device and browser information for security purposes. Use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service.

5. Server Logs, Throttling & Retention

• Rate-limiting: APIs use a global bucket and a per-IP bucket (HTTP 429 may be returned).
• What’s processed: IP address, user-agent, timestamps, and request path may appear in short-lived cache entries and routine server logs.
• Moderation notes (Bookmarks): internal moderation fields and statuses are stored with submissions.
• Retention: throttle cache entries expire automatically (minutes). Routine server logs are retained only as needed for operations, security, and troubleshooting, then deleted. Moderation records for Bookmarks submissions are retained as necessary to operate the service.

6. Data Sharing & Hosting

We do not sell or rent data. Operational data may be processed by hosting, storage, email, and network providers as part of normal service delivery.

7. Your Rights

If applicable law (e.g., EU/UK/California) grants you rights to access or delete personal information, you may contact me to request review or deletion of contact-form messages associated with your email, or to inquire about log data related to your IP. Because API usage is anonymous and account-free, requests may need to be scoped by technical identifiers (e.g., approximate IP and timeframe).

8. Changes to This Policy

This policy may be updated from time to time. Material changes will be reflected by an updated “Last updated” date above.

9. Contact

Questions? Email contact@joshuaeastman.dev.