bryan tan
Menu
Let’s talk

Legal

/Privacy Policy

Last updated
2026-10-03
Data stored
no database — a Telegram message and an email, handled by Telegram and Google outside Australia
Retention
no longer than I need to answer you; a failed submission is kept 14 days for diagnosis
Analytics
none
01

Who we are

This is the personal website of Bryan Tan, an independent creator based in Australia. The site is available at bryantan.au.

02

What data we collect and why

Newsletter signups

If you subscribe to the newsletter via a form on this site, we collect your email address. We use it to send the newsletter and nothing else. No name is required. No profile is built.

The newsletter is delivered via Listmonk, a self-hosted, open-source mailing list manager. Your email address is stored in a Listmonk instance hosted on servers I control (bt3ch.org). It is not shared with any third-party email service provider.

Contact form submissions

If you submit the contact form, we collect the reason you chose (a role, work you would like done, or something else), the name you enter, and the content of your message. We also collect the contact detail you choose to give — the form asks how you would like to be reached, for example an email address, a LinkedIn profile, or anything else you prefer. Depending on the reason you chose, the form may ask a few optional questions (for a role: company and engagement type; for work: hours per week, team size and timeline) — every one of them can be left blank and the form will still send. The form also sends two anti-spam signals that carry no personal information: a hidden timestamp recording when the page loaded, and a hidden field that real visitors never see or fill in. Both are used only to filter automated submissions and are never stored.

The submission is posted to an n8n workflow running on a server I control (bt3ch.org). From there it is sent to me as a private Telegram message and an email. It is not written to any database: the Telegram message and the email are the only copies, and there is no separate archive of your submission. Those two copies pass through Telegram's and Google's infrastructure, which we do not control and which does not guarantee your message stays in Australia. We do not record your IP address or your browser's user agent for a submission that goes through successfully. If a submission fails to process, the request itself is retained on the n8n server for diagnosis and deleted within 14 days, and that can include the technical headers your browser sends — the same kind of information Cloudflare's access logs already capture, described under Hosting below. It is not shared with anyone, and we use it only to reply to you. We do not add contact form senders to the newsletter without explicit opt-in.

Analytics

This site runs no analytics. There is no analytics script, no tag manager, and no tracking pixel on any page. Nothing measures your visit beyond the access logs the host keeps, described under Hosting below.

03

Hosting

This site is hosted on Cloudflare Pages. Cloudflare may collect basic access logs (IP addresses, request metadata) as part of their network infrastructure. See Cloudflare's Privacy Policy for details.

04

Cookies

This site does not set any cookies of its own, and it loads no third-party script that could set one. Cloudflare may set its own infrastructure cookies as part of serving the site. If cookies are introduced in future (for example, for a gated content section), this policy will be updated before they are deployed.

05

Data retention

  • Newsletter subscriber emails: retained until you unsubscribe. You can unsubscribe at any time via the link in every newsletter email.
  • Contact form submissions: kept only as the Telegram message and the email they arrive as, in my own chat and mailbox, for as long as I need them to deal with your enquiry. A submission that goes through successfully is not written to any database and has no separate archive. A submission that fails to process is held on the n8n server for diagnosis and deleted within 14 days. Ask at any time and I will delete yours.
  • Analytics data: none is collected.
06

Your rights (Australian Privacy Act 1988)

Under the Australian Privacy Act 1988 (Privacy Act) and the Australian Privacy Principles (APPs), you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate personal information.
  • Complain if you believe we have breached the APPs.

To exercise any of these rights, get in touch via the contact page.

07

Changes to this policy

If this policy changes materially, the "Last updated" date above will change and I will note the change in the newsletter.

08

Contact

Questions or requests: see the contact page.