Trust & Security
Your Privacy, Plainly Stated
People tell me things here they have not said out loud to anyone. That deserves more than a paragraph of legal boilerplate, so this page says exactly what happens to anything you send me and how this site is put together.
What the contact form collects — and what it does not
The form asks for your name, email, an optional phone number, and what is on your heart. When you send it, that message is emailed directly to me and nowhere else.
Nothing you write is stored on this website. There is no database behind it, no account for you, and no archive of enquiries sitting on a server. The message is delivered and that is the end of its journey through this site. Your reading, and anything you tell me in it, stays between us — the same as it would across my table.
Two technical details you are entitled to know. Your approximate country and IP address are checked when you submit, purely to keep automated spam out, and that origin is noted on the email that reaches me. And there is a hidden field on the form that people never see; if it comes back filled in, the sender was a bot and the message is discarded.
No payment details ever touch this site
Cash App and Zelle are handled entirely inside your own banking or payment app. This website never sees, handles, or stores a card number, a bank login, or a balance. The links and codes here simply open your app — the payment happens there, under your bank's protection, not mine.
How the site itself is secured
This is the same standard TMG2S applies to every site it builds, and it is worth being specific rather than vague:
- Encrypted end to end. The connection is HTTPS only, with a minimum of TLS 1.3 — the current standard, which permits only cipher suites with forward secrecy. Older, weaker encryption is refused rather than tolerated.
- Strict transport security, so a browser will not fall back to an unencrypted connection once it has seen this site.
- A content security policy that tells the browser exactly what this page is allowed to load, so injected code has nowhere to run from.
- Framing refused outright, so no other site can wrap this one to impersonate it or trick you into clicking something you cannot see.
- Camera, microphone, geolocation and payment APIs switched off at the page level. This site has no business asking for any of them, so it cannot.
- Layered spam filtering on the form — a challenge, a hidden trap field, a timing check and content scoring — so my inbox stays clear and real messages get through.
Built to be used by everyone
Not everyone reads a screen the same way, and a site that only works for some people is not finished. This one carries a skip-to-content link for keyboard users, proper landmarks and headings for screen readers, written descriptions on every image, text that never falls below a comfortable reading size, and visible focus outlines. If you have asked your device to reduce motion, the drifting embers and the breathing moonlight stop for you. The ocean sound never starts on its own and can be paused from the footer at any time.
If something here is hard for you to use, tell me. That is a fault worth fixing, not an inconvenience.
Watched around the clock
This site and its contact form are checked automatically, day and night, by monitoring that raises an alarm the moment a page stops loading or a message stops arriving. The point is simple: if something breaks at two in the morning, it is found and fixed before you ever meet it — and before a message meant for me quietly goes missing.
Found a problem? Please tell us
If you believe you have found a security or privacy flaw in this website, we want to hear from you rather than read about it later. Write to [email protected] with what you found and how to reproduce it. Reports are read by a person, acknowledged, and acted on. Please do not access or alter anyone else's information while testing, and give us a reasonable window to fix it before publishing — we will not pursue anyone who reports in good faith under those terms.
This site is built and maintained by TMG2S — Managed Web & Security. Readings are for guidance and reflection; please see the disclaimer.