Privacy & cookie policy
Last updated: September 9, 2026
I’m Nick Clark, an individual based in Florida, United States. I operate nick-clark.com to share my work and receive professional and consulting inquiries. This policy explains what happens to your information when you visit this site.
This site uses Google Analytics and Microsoft Clarity to understand visits and interactions. Tracking is on by default. You can disable it below and continue using the site, or choose not to use the site.
Your tracking choices
Google Analytics, Microsoft Clarity, and invitation-linked activity measurement run by default, subject to the exclusions described below. Open “Privacy policy” in the footer, then “Cookie settings / opt out” and choose “Disable tracking” to turn them all off, or adjust analytics and recordings separately. Existing saved opt-outs are honored. These controls do not make continued browsing an affirmative consent action.
Your saved choice applies to this browser on this hostname for 180 days. You can change it at any time. Saving a choice reloads the page to apply it. When the preference cookie expires or is cleared, or you use another browser or hostname, default-on tracking applies again unless a browser privacy signal overrides it. Site cookies must be available to save this preference; otherwise, enable a supported browser privacy signal before continuing.
This site treats Global Privacy Control (GPC) and Do Not Track (DNT) signals as a request to turn off all optional tracking, including previously enabled tracking. While either signal is on, optional categories cannot be enabled here.
Opting out stops future optional collection and clears accessible first-party analytics cookies. It does not automatically delete information already collected or cookies on a provider’s own domain. To request deletion of existing information, email hi@nick-clark.com. You can also clear cookies through your browser.
Optional analytics and session recordings
- Visit analytics: Unless disabled, this site uses Google Analytics, a service provided by Google, to measure visits and interactions on public pages. Google Analytics uses cookies and similar technologies to collect website usage information, including page views, browser/device information, approximate location, and engagement. This information is transmitted to and processed by Google to provide reports that help me understand and improve the site. The site’s initial page information excludes URL queries and fragments. Google advertising storage, advertising personalization, and Google Signals are disabled in the site’s tag configuration.
- Invitation-linked activity: If you use a private portfolio invitation and have not disabled analytics, this site records page/document views, engagement, and actions such as opening a résumé or contact link in its own Cloudflare-hosted database. Records include random invitation, visitor, and visit identifiers, timestamps, page paths, and available coarse country/region and referring-site information. An invitation can be associated with the recipient or organization it was issued to, so this activity is not anonymous to me. These identifiers are not sent by the site to Google or Microsoft.
- Session recordings: Unless disabled, I use Microsoft Clarity to capture how you use and interact with public pages through behavioral metrics, heatmaps, and session replay. Clarity uses first-party and, depending on provider behavior and browser restrictions, third-party cookies and other tracking technologies. Microsoft and I use this website usage information to understand page popularity and interactions, including clicks and scrolling, and to improve the site. Microsoft also processes the information as described in its Privacy Statement, linked below. Contact forms are masked in Clarity. Recordings and Google Analytics do not run on private work, document-viewer, or private-access pages. Do not enter sensitive information into public page content or URLs.
The site does not load these analytics services in a “cookieless” tracking mode when you decline. Advertising consent is not requested or granted by these controls. Google and Microsoft process information under their applicable terms and privacy notices: Google Privacy Policy, How Google uses information from sites or apps that use its services, and Microsoft Privacy Statement.
Cookies and browser storage
Cookies are small values stored by your browser. Session storage holds information for a browser tab. Essential storage remembers privacy choices and provides the private access you request; it does not require optional analytics to be enabled.
| Storage / provider | Purpose | Duration |
|---|---|---|
| nc_privacy · this site | Essential: remembers tracking preferences, preference format version, and choice time. | 180 days |
| selected_work_auth · this site | Essential: signed private-work authorization and invitation context. | Up to 7 days for shared-password access; up to the invitation’s remaining 30-day lifetime for an individual invitation. |
| selected_work_magic_redeemed · this site | Optional analytics: marks a newly redeemed invitation when analytics is allowed. | Up to 5 minutes; cleared when processed. |
| nick_clark_job_search_visit_id · session storage | Optional analytics: groups invitation-linked activity within a tab. | Tab session; removed on opt-out. |
| _ga, _ga_* · Google Analytics | Optional analytics: browser and session measurement. | Configured by this site for up to 180 days. |
| _clck, _clsk · Microsoft Clarity | Optional recordings: browser and session identifiers. | Provider-managed expiry, typically up to 1 year and 1 day respectively; accessible cookies are cleared on opt-out. |
| Cloudflare security storage, such as cf_clearance when issued | Essential: bot checks and protection of the site and forms. | Determined by the challenge and Cloudflare security configuration. |
Clarity’s documented third-party cookie names include CLID, MUID, MR, SM, and ANONCHK. Their presence depends on provider behavior and browser restrictions; this site sends Clarity an advertising-storage denial. See Microsoft’s cookie inventory. Cookie lifetimes and server-side retention are different: deleting a browser cookie does not erase a provider’s existing records.
Contact forms and email
When you send a message, I receive your name, email address, company (if supplied), and message so I can respond. Cloudflare Turnstile checks for bots and receives technical information, including the request IP address during verification. Resend delivers your submission to my email inbox, hosted by Google.
To help detect spam and impersonation, the server checks the sender’s email domain against DNS and domain-registration services. If company verification is configured, the company name you supply and your email domain are sent to OpenAI for a web-assisted company check. That lookup does not include your full email address, name, or message. The result is a sender-confidence indicator for my review; it does not automatically reject a successfully verified contact submission.
These steps support the message you ask me to receive and protect against abuse. They are separate from optional tracking. Please do not submit health information, financial account details, passwords, or other sensitive personal information. You may also contact me directly at hi@nick-clark.com.
Provider information: Cloudflare, Resend, and OpenAI.
Hosting, security, and private access
Cloudflare hosts and protects this site and its private documents. Serving requests requires technical data such as an IP address, requested URL, browser information, and timing. Security, rate-limit, and operational records may be processed even if you reject analytics.
Private invitations retain authorization information such as their recipient label, permitted projects, expiration, revocation status, and redemption status. This is used to provide and protect access to confidential work. Rejecting analytics prevents optional activity records; it does not disable authorization or abuse prevention.
Retention and your requests
Contact correspondence is kept as needed to respond, maintain a relevant professional relationship, and meet applicable recordkeeping or legal needs. Invitation records support access administration. Optional analytics records remain subject to the retention settings of the relevant service or database; this policy does not imply that those records disappear when a cookie expires.
To ask about your information, request access, correction, or deletion, or raise a privacy concern, email hi@nick-clark.com. Include enough context to locate the information, such as the email address you used to contact me and an approximate date. Do not send a password or active private-access link. I may need to verify that a request relates to you before disclosing or deleting information. Applicable legal or security obligations may limit deletion.
Where applicable data-protection law provides them, you may also have rights to object to processing, restrict processing, receive portable information, withdraw consent, and complain to your local data-protection authority. This site currently uses default-on tracking with an opt-out; this notice does not itself establish consent where prior consent is required. Responding to inquiries and securing the site serves the communication you initiate and my legitimate interests in operating a secure professional website, where that legal basis applies.
Other websites, location, and children
Links to Calendly, LinkedIn, and other websites open services with their own privacy practices. Those links do not load an embedded booking or social-media tracker on this site.
I am in the United States. Service providers may process information in the United States and other countries where they operate. Protections and legal rights may differ by location.
This professional portfolio is intended for adults and is not directed to children under 13. If you believe a child submitted personal information, contact me so I can investigate and remove it where appropriate.
Changes to this policy
I will update the date on this page when this policy changes. This notice will describe material changes to tracking practices. Saved opt-outs will not be treated as permission to enable new tracking purposes.