Privacy Policy
Last updated: October 13, 2026
This privacy policy explains how johnserra.com collects, uses, and protects information when you visit or interact with this website.
Who I Am
This is the personal website of John Serra. You can reach me at john@serra.us.
Information I Collect
Contact Form
When you submit a contact, services, or data-audit inquiry, I collect the information you enter. The stored message also includes the first-party path where the visit began, the path where the form was submitted, and limited optional referral context. These fields help me understand which site experience led to the inquiry. Query strings and full external referrer URLs are not stored in this attribution block. The information is stored in a database and may be delivered to me by email so I can respond. Service providers involved in storage and delivery are listed below. I do not sell this information or use it for marketing.
The originating path is kept for the current browser session. It is not a cross-device identifier and does not create a user account.
AI Chat Widget
The AI assistant uses Google's Gemini API to process messages you send. Do not include sensitive information. Conversation saving is off by default. If you choose “Save conversations on this browser,” recent completed chat messages are stored in this browser's local storage for up to 30 days after your last completed exchange, subject to a five-conversation and size limit. You can delete one or all saved conversations and turn saving off in the chat. Others with access to this browser profile, or scripts on this site, may be able to read local storage. Saving does not create an account or a server-side transcript archive. Sent messages are still processed by the chat API and Google under their applicable terms; deleting a browser copy does not delete data already processed by them.
The site uses short-lived, hashed session and IP identifiers to limit abusive chat traffic. See Google's privacy policy and Gemini API terms for information about Google's processing.
Server Logs
Like all websites, this site automatically logs basic request data (IP address, browser type, pages visited) through Vercel's hosting infrastructure. These logs are used for security and performance monitoring and are not linked to your identity.
Analytics and Cookies
This site uses Google Analytics 4 to measure page and session traffic and anonymous, aggregate form-completion events. Completion events contain a form type and a normalized first-party path category; they do not contain names, email addresses, company names, message text, full referrer URLs, query strings, or assessment answers. Google Analytics may use browser storage or cookies according to Google's configuration and policies. The site does not use advertising cookies. Vercel may also set functional cookies necessary for hosting infrastructure.
Third-Party Services
This site uses the following services:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Vercel | Hosting & delivery | vercel.com/legal/privacy-policy |
| Supabase | Contact form storage and chat rate limiting | supabase.com/privacy |
| AI chat responses | policies.google.com/privacy | |
| Google Analytics | Aggregate site traffic and inquiry-completion measurement | policies.google.com/privacy |
| Resend | Contact form email delivery | resend.com/legal/privacy-policy |
| WordPress / Jetpack CRM | Contact name and email may be synced to a CRM when configured | automattic.com/privacy |
Data Retention
Contact form submissions are retained to maintain a record of correspondence. You may request deletion of your data at any time by emailing john@serra.us.
Your Rights
You have the right to:
- Request access to any personal data I hold about you
- Request correction or deletion of your data
- Withdraw consent at any time
To exercise any of these rights, contact me at john@serra.us.
Changes to This Policy
I may update this policy from time to time. The date at the top of this page reflects the most recent revision.