Legal
Privacy policy
Last updated August 2026. This policy explains what happens to information about you when you use BootMedia Notes.
Who is responsible
This website is operated by Thomas Sonnabend, an individual publisher, at 8010 Via Sardinia Way, Estero, FL 33928, United States. Contact: thomas@sonnabendlabs.com, (603) 945-2452. The site is published at https://sonnabendlabs.com. For visitors in the European Economic Area and the United Kingdom, Thomas Sonnabend is the controller of personal data collected through this site.
What is collected
Information you provide
There is no contact form on this site. If you email me or call, I receive whatever you choose to tell me — typically your email address and the content of your message. It is used to answer you and for nothing else.
Information collected automatically
The hosting provider records standard server log data for every request: IP address, date and time, page requested, referring page, browser and operating system version. These logs exist to keep the site running and to investigate abuse and technical faults.
Information from cookies
Cookies and similar technologies are described in the cookie policy. Non-essential cookies are set only after you allow them.
I do not ask for or knowingly collect payment details, Social Security numbers, precise geolocation, health data or any other sensitive category of personal information.
Why it is processed
| Purpose | Data | Legal basis (EEA / UK) |
|---|---|---|
| Delivering the site and keeping it secure | Server logs, essential cookies | Legitimate interests |
| Answering your message | Contact details, message content | Legitimate interests |
| Measuring which pages are read | Measurement cookies and identifiers | Consent |
| Displaying and measuring advertising | Advertising cookies and identifiers | Consent |
| Meeting legal obligations | Whatever the obligation requires | Legal obligation |
Advertising
This site displays advertising supplied by third-party networks, including Google (Google AdSense and Google Ad Manager). Where you have given consent, these partners may set cookies or read device identifiers to measure campaigns, limit repetition and, if you allowed it, personalise what is shown. They do not receive your name or email address from me.
Consent signals are passed to Google services using Consent Mode. Google publishes its own explanation of how it handles data in advertising products at policies.google.com/technologies/partner-sites, and ad personalisation can be adjusted at adssettings.google.com.
Who else sees your data
- Namecheap, Inc. — web hosting. Stores and serves the site and processes server logs on my behalf.
- Google LLC — advertising (AdSense / Ad Manager). Only with your consent, as described above.
- Google LLC — measurement (Google Analytics). Only with your consent.
- Namecheap Private Email — handles messages you send to the address above.
- Authorities, where disclosure is legally required.
I do not sell personal information, and I do not share it for cross-context behavioural advertising outside the consent-based mechanisms described here.
Your rights in the United States
Residents of California, Colorado, Connecticut, Virginia and other states with comparable privacy laws have the right to know what categories of personal information are collected, disclosed or sold; to request a copy; to request correction or deletion; to opt out of sale, sharing and targeted advertising; and not to be discriminated against for exercising any of these rights.
To exercise them, write to thomas@sonnabendlabs.com with "Privacy request" in the subject line, or call (603) 945-2452. I respond within the period the applicable law allows, normally 45 days. Verification may require you to confirm details of your earlier contact with the site. An authorised agent may act on your behalf with written permission.
You can opt out of advertising cookies at any time using the control, available here and in the footer of every page.
Your rights in the EEA and the UK
You may request access to the personal data held about you, its correction or deletion, restriction of or objection to its use, and portability; and you may withdraw consent at any time without affecting what was done before withdrawal. Complaints can be made to your national supervisory authority.
International transfers
This site is operated from the United States and the providers listed above are located in the United States and elsewhere. Where personal data leaves the EEA or the UK, transfers rely on the European Commission's Standard Contractual Clauses or an applicable adequacy decision. You can ask which mechanism applies to a specific provider.
How long data is kept
| Data | Kept for |
|---|---|
| Server logs | 30 days, then deleted or anonymised |
| Correspondence | 24 months after the matter is closed |
| Consent record | 180 days, in a cookie on your device |
| Measurement and advertising data | As set by the provider concerned; see their policy |
Children
This site is intended for a general adult audience and is not directed at children. I do not knowingly collect personal information from anyone under 13, consistent with the Children's Online Privacy Protection Act. If you believe a child has provided personal information, contact me and it will be deleted.
Security
The site is served over HTTPS. Access to correspondence and any administrative interface is restricted. No system is perfectly secure, and I do not claim otherwise.
Changes
When this policy changes the date at the top is updated. Material changes affecting how personal data is used will be highlighted on the site, and where the law requires it consent will be requested again.