Privacy

Privacy Policy

Effective September 29, 2026

This policy explains how Jack Dishman and DISH CORP (together "we", "us", or "our") collect, use, share, and protect information when you visit jackdishman.com (the "Site"), subscribe to the newsletter, or make a payment through the Site.

The short version: we collect the minimum needed to send you what you asked for and to take payments, we never sell it, card details never touch our servers, and you can ask us to delete your data at any time.

1.Information we collect

Information you give us

Newsletter: your name, email address, and which topics you want to hear about.
Payments: the amount and the "reason for payment" you type on this Site. On Stripe's checkout page you also provide your name, email address, billing address, and a payment method. Card numbers and bank account details are collected and stored by Stripe, Inc. and never reach our servers.
Correspondence: anything you include when you email us.

Information collected automatically

Page views: the page you visited, the page that referred you, and a coarse location (country, region, city) that our hosting provider derives from your IP address. We do not store your IP address. We store a one-way, secret-salted hash of it and of your browser's user-agent string so we can count unique visits and stop abuse.
Aggregate analytics through Vercel Web Analytics, which does not use cookies or track you across sites.
Server and security logs kept by our hosting provider, which include IP addresses and request details for blocked or rate-limited requests.

Cookies and similar technology

Name	Purpose	Lifetime
pa_session	Set only after you click a confirmation link we email you. Identifies your verified newsletter subscription so subscriber-only writing can be shown to you.	60 days
pa_admin	Used only by the site owner to sign in to the editing tools.	14 days
Browser storage	The 3D museum remembers your graphics-quality choice on your own device. Nothing is sent to us.	Until you clear it

We do not use advertising cookies, third-party tracking cookies, or cross-site tracking of any kind.

2.How we use information

To deliver the newsletter you asked for, confirm your email address (double opt-in), honor your topic preferences, and grant access to subscriber-only writing.
To process payments, match a payment to the invoice, engagement, or purpose you described, send you a receipt through Stripe, and let Jack Dishman know a payment arrived.
To keep records of payments for accounting, tax, and dispute-resolution purposes.
To understand, in aggregate, which writing is read and roughly where readers are.
To keep the Site secure: rate limiting, bot blocking, fraud prevention, and debugging.
To comply with legal obligations and enforce our Terms & Conditions.

We do not sell personal information, and we do not use it for advertising or profiling.

3.Who we share information with, and how

We share information only with the service providers below, each of which processes it on our behalf under its own terms and privacy policy. Information is transmitted to them over encrypted (HTTPS/TLS) connections directly from our servers or, for Stripe's checkout page, from your browser.

Provider	Role	What they receive
Stripe, Inc.	Payment processing	Amount, reason for payment, and the name, email, billing address, and payment details you enter on Stripe's page.
Resend, Inc.	Email delivery	Your name and email address and the content of emails we send you. For payments, the notice sent to Jack Dishman includes the payer's name, email, amount, and reason.
Vercel, Inc.	Hosting and analytics	Every request to the Site passes through Vercel, which sees your IP address and request metadata and supplies the coarse location described above.
Neon, Inc.	Database	Subscriber records, hashed page-view data, session identifiers, and rate-limit counters.
Google LLC	Font delivery	The Site's stylesheet may request fonts from Google Fonts, which receives your IP address when it serves them.

Other disclosures

Legal: when required by law, subpoena, or court order, or to protect our rights, safety, or property.
Payment disputes: if you dispute a payment with your bank or card issuer, we may provide Stripe and the card network with our records of the payment, including the reason for payment you entered, the time you accepted our Terms, and related correspondence.
Business transfers: if the Site or the business is transferred, information may move with it under this same policy.

We never share information with data brokers or advertisers.

4.How long we keep information

Newsletter records: for as long as you are subscribed. If you unsubscribe we keep a minimal record of your address and opt-out so we never email you again. You can ask us to delete it entirely.
Email confirmation links: 24 hours. Subscriber sessions: 60 days. Expired records are purged daily.
Page-view records: deleted after 90 days.
Payment records: kept by Stripe under its retention rules and in our accounting records for as long as tax and accounting law requires, generally seven years.

5.How we protect information

All traffic to the Site is encrypted with HTTPS/TLS, and the Site sends strict security headers, including a Content Security Policy and clickjacking protection.
Card and bank details are entered only on Stripe's PCI DSS Level 1 certified checkout page. Our servers never see them.
IP addresses are never stored in readable form; only a salted, one-way hash is kept.
Secrets and API keys are stored as protected environment variables, never in code, and the database is reachable only from our server-side code.
Owner tools are protected by a password and expiring sessions, and incoming payment notifications from Stripe are cryptographically signature-verified.
Automated rate limiting and bot blocking run at the network edge.

No method of transmission or storage is completely secure. If you believe your information has been compromised, contact me@jackdishman.com immediately.

6.Your choices and rights

Unsubscribe or change topics using the link in the footer of every newsletter email.
Request a copy, correction, or deletion of your information by emailing me@jackdishman.com. We respond within 30 days and may ask you to verify that the request comes from the address in question.
Depending on where you live (for example California, the EU, or the UK) you may have additional rights, such as objecting to processing or lodging a complaint with a supervisory authority. Email us and we will honor them where they apply.
The Site does not track you across other sites, so it behaves the same whether or not your browser sends a Do Not Track signal.

Where European law applies, we rely on your consent for the newsletter, performance of a contract for payments, our legitimate interests for security and aggregate analytics, and legal obligations for keeping financial records.

7.International visitors

The Site is operated from the United States and our providers store information there. By using the Site you understand that your information is transferred to and processed in the United States, which may have different data-protection rules than your country.

8.Children

The Site is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has provided information or made a payment, email me@jackdishman.com and we will delete it.

9.Third-party links

The Site links to services we do not control, such as GitHub, LinkedIn, X, Farcaster, Instagram, and Cal.com. Their privacy practices are their own, and this policy does not cover them.

10.Changes to this policy

We may update this policy from time to time. The effective date at the top tells you when it last changed. Material changes will be flagged on this page, and continued use of the Site after a change means you accept the updated policy.

11.Contact

Questions, requests, and complaints: me@jackdishman.com. The Site is operated by Jack Dishman; payments are made to DISH CORP.