Privacy
Privacy policy
This page explains what darrenmarble.com collects, why, how long I keep it, who helps me run the site, and the choices and rights you have.
Last updated October 13, 2026
The short version
I use Google Analytics 4 to see how the site is used. It is on by default and you can opt out. Microsoft Clarity heatmaps and session recordings run only if you tap “OK” in the cookie notice. If you use the contact form or sign up for my newsletter, I get what you send. I don’t sell your information or share it for cross-context behavioral advertising.
Who I am
This site is run by me, Darren Marble, based in Los Angeles, California. I am the controller of the personal information described here (the person who decides how and why it is used). The easiest way to reach me about privacy is the contact form.
What I collect
| Category | Examples | Source |
|---|---|---|
| Identifiers | Name and email address you enter in the contact form or newsletter signup; a random browser identifier set by analytics cookies; IP address | You; your browser |
| Internet or other electronic network activity | Pages viewed, referring site, scroll depth, clicks, video plays, device and browser type, and (only with your consent) Clarity heatmaps and session recordings | Your browser, via Google Analytics and Microsoft Clarity |
| Approximate location | City, region or country inferred from your IP address. I do not collect precise location. | Derived from your IP address |
| Form contents | Company, topic and message you send through the contact form | You |
I don’t ask for, and don’t intend to collect, sensitive personal information such as government ID numbers, financial account details, health information or precise geolocation. Please don’t send it through the contact form.
Analytics (Google Analytics 4)
Google Analytics 4, a service of Google LLC, tells me which pages people visit, how they arrived, how far they scroll, which sections they view, and which buttons and videos they use. It uses first-party cookies and a random browser identifier. I don’t use it to identify you by name. It is on by default. You can turn it off with “Opt out” (see below). Learn more at how Google uses information from sites that use its services.
Heatmaps and session recordings (Microsoft Clarity)
Microsoft Clarity, a service of Microsoft Corporation, records clicks, scrolling and page interactions so I can see heatmaps and replays of how the site is used. It loads only after you tap “OK” in the cookie notice, and never when your browser sends a Global Privacy Control signal. Form fields are masked. See Microsoft’s privacy statement.
Contact form (Formspree)
When you send the contact form, your name, email, company, topic and message go through Formspree, Inc. to my inbox. I use them only to reply to you.
Newsletter (Substack)
If you subscribe to Targeted, your email address is handled by Substack, Inc. under Substack’s privacy policy. Every issue has an unsubscribe link.
Hosting
The site is hosted by Netlify, Inc., which processes standard server logs such as IP address and browser type to deliver and secure the site.
Why I use it, and legal bases
- Understanding and improving the site (Google Analytics). For visitors in the European Economic Area (EEA), the United Kingdom or Switzerland, I rely on my legitimate interest in running a useful, well-performing site. You can object at any time with “Opt out.”
- Heatmaps and session recordings (Microsoft Clarity). Based on your consent, given by tapping “OK.” You can withdraw it at any time with “Opt out.”
- Replying to your message (contact form). Based on taking steps you ask for before or under an agreement (for example a speaking or media request), or on your consent where that applies.
- Sending the newsletter (Substack). Based on your consent when you subscribe. Unsubscribe any time.
- Keeping the site secure and working (hosting logs). Based on my legitimate interest in protecting the site and its visitors, and to meet legal obligations where they apply.
How long I keep it
- Google Analytics: event data is kept for the retention period set in my Analytics property, and no longer than 14 months. Aggregated reports may be kept longer because they don’t identify you.
- Microsoft Clarity: kept under Microsoft’s retention practices. Session recordings are generally kept for about 30 days; aggregated heatmaps may be kept longer.
- Contact form messages: kept only as long as needed for our conversation and any follow-up, then deleted.
- Newsletter: your email stays with Substack until you unsubscribe or ask for it to be deleted.
- Hosting logs: kept by Netlify for a limited period under its own practices.
Service providers
I don’t sell personal information. I share it only with providers that help me run the site, who process it for that purpose:
- Google LLC (Google Analytics 4): site analytics
- Microsoft Corporation (Microsoft Clarity): heatmaps and session recordings, with consent
- Formspree, Inc.: contact form delivery
- Substack, Inc.: newsletter
- Netlify, Inc.: hosting and security
I may also disclose information if required by law, to protect my rights or the safety of others, or as part of a transfer of the site.
International transfers
I am based in the United States, and these providers process data in the United States and other countries. If you visit from the EEA, the UK or Switzerland, your information is transferred to the United States. Where required, these transfers rely on safeguards such as the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) or Standard Contractual Clauses offered by the providers.
Security
The site is served only over HTTPS, collects as little as possible, and relies on established providers with their own security programs. No website or transmission is perfectly secure, so I can’t guarantee absolute security.
Your choices
- Cookie notice: tap “Opt out” to turn off Google Analytics and Clarity for this browser, or “OK” to allow Clarity. Your choice is remembered on this browser.
- Global Privacy Control: honored automatically. Advertising storage is turned off and Clarity never loads.
- Browser settings or Google’s Analytics opt-out add-on.
Do Not Track
There is no common standard for browser “Do Not Track” signals, so the site doesn’t respond to them. It does honor Global Privacy Control, as described above.
Your privacy rights
California residents. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, you have the right to:
- Know what personal information I collect, use and disclose, and get a copy of it
- Delete personal information I hold about you, subject to legal exceptions
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information. I don’t sell or share personal information (as those terms are defined in the law), and haven’t in the past 12 months. Global Privacy Control is honored as an opt-out signal.
- Limit use of sensitive personal information. I don’t collect it.
- Not be discriminated against for using any of these rights
The categories, sources, purposes and recipients described on this page cover the past 12 months.
Other U.S. states. Residents of states with similar laws, such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others, may have similar rights to access, correct, delete and get a copy of personal information, to opt out of targeted advertising, sale or profiling, and to appeal a decision about a request. You can use the same process below. If I decline a request, you can appeal by replying to my response, and if you remain unsatisfied you may contact your state attorney general.
EEA, UK and Switzerland. You have the right to access, correct, delete, restrict or object to processing of your personal information, to data portability, and to withdraw consent at any time. You may also complain to your local data protection authority.
How to use your rights
Send a request through the contact form and say what you’d like me to do. To protect you, I’ll verify your request by matching it with information I already hold, usually by confirming the email address involved. I respond within 45 days, or tell you if I need more time where the law allows. You can use an authorized agent; I may ask for proof of the agent’s authority and ask you to verify your identity directly. There is no charge for reasonable requests.
Children
The site is not directed to children under 13, and I don’t knowingly collect personal information from them. If you believe a child has sent me information, contact me and I’ll delete it.
Links to other sites
The site links to and embeds content from others, including Substack, YouTube, Netflix, X, LinkedIn, Instagram, news outlets and company websites. Those sites have their own privacy practices, which I don’t control. Please read their policies.
Changes
If this policy changes, I’ll post the new version here and update the date above.
Contact
For questions about this policy, use the contact form. See also the Terms of Use.