How this site uses your data

This is the website of Stefan Navarrete, a product designer based in Toronto, Canada. I’m responsible for it. If you have a question about your data, email hi@stefnav.design.

In short

• I measure how people use this site so I can make it better: which pages and projects get read, where visitors come from, and what they click.
• I don’t know who you are. Analytics never gets your name or email, and I don’t sell or share data for advertising.
• If you’re in Europe, the UK, Switzerland or Quebec, nothing is measured until you say yes. Everywhere else you can turn it off below, and it stays off if your browser sends Global Privacy Control.

Analytics

I use PostHog, hosted on its servers in the European Union. When analytics is on, your browser sends:

• the pages you visit, how long you stay and how far you scroll
• the links and buttons you click, and a few named actions, such as opening a case study, flipping through the projects at the top of the homepage, or opening the booking calendar
• the site or campaign link that brought you here
• your browser, device type, screen size, language and page-speed measurements
• your approximate country and region, worked out by Cloudflare from your connection

A random ID is stored in your browser (a cookie and local storage entry starting with ph_) so visits from the same browser can be connected. It lasts up to a year and isn’t linked to your name or email.

Analytics goes through this site’s own address (stefnav.design/relay) on its way to PostHog, so it isn’t blocked as a third-party script. Your IP address passes through to PostHog to estimate your location, and PostHog is set to discard it rather than store it. Session recordings are off.

Where the law asks for consent, analytics runs only after you agree. Elsewhere it runs because I have a legitimate interest in understanding how the site is used, and you can turn it off at any time.

Booking a call

The booking calendar comes from Cal.com and loads only when you open it. The details you enter there (your name, email and anything you write) go to Cal.com and to me so we can meet. Cal.com may set its own cookies.

Sending a message

When the message form is switched on, it sends your name, email and message to me by email through Resend. Cloudflare Turnstile checks that a person, not a bot, sent it. The site stores nothing, and I keep your message in my email only for as long as we’re talking.

Hosting

Cloudflare hosts this site. Like any web host, it handles your connection, including your IP address, to deliver pages and keep the site secure.

What’s stored in your browser

Name	What it’s for	How long
ph_… (cookie and local storage)	Analytics’ random ID and settings, only when analytics is on	Up to a year
sn-analytics	Remembers your analytics choice	Until you clear it
sn-visitor	Your country and region for this tab, to decide whether to ask first	Until you close the tab

Your rights

You can ask to see, correct or delete data about you, or object to its use, by emailing hi@stefnav.design. Analytics isn’t tied to your name, so I usually can’t find a specific visitor’s data. Turning analytics off stops it at once and clears the ID from your browser. You can also complain to your data protection authority: in Canada, the Office of the Privacy Commissioner.

Changes

When what this site collects changes, I update this page and the date at the top.