Privacy policy
In short: this website uses Google Analytics to count visits, and that's all it collects. If you contact me, I use your details to reply to you, nothing else. My internal reporting tools read advertising data from accounts I manage, only to show me reports. I never sell that data or share it with anyone.
Who I am
This site and its tools are run by Haiko Nieuwoudt, a sole proprietor in Cape Town, South Africa. For anything about privacy, email haiko@dontsp.am.
Visiting this website
The site has no accounts or sign-up forms. It uses Google Analytics to understand how many people visit and which pages they read. Google Analytics sets cookies and collects information such as:
- pages viewed, time on page and how you arrived (for example from a search or a link)
- device, browser, operating system and language
- approximate location derived from your IP address
I see this only as totals and trends in Google Analytics reports, never as information that identifies you. Google processes it under the Google privacy policy; see also how Google uses information from sites that use its services. You can block these cookies in your browser or install the Google Analytics opt-out add-on.
Contacting me
If you email me or message me on WhatsApp from this site, I receive your name, number or email address and whatever you write. I use it only to reply and to work with you, and keep it for as long as we're in touch or as the law requires. WhatsApp messages are also handled under WhatsApp's privacy policy.
Internal advertising reports
I run a private reporting dashboard for advertising accounts I own or manage on behalf of clients. With the account holder's permission, it connects to the Google Ads API, the Meta Marketing API and the LinkedIn Marketing API with read-only access, and pulls:
- account and campaign names, and whether campaigns are running
- spend, budgets and performance figures such as impressions, clicks and conversions
This data is used only to show spend and performance reports to me and to the account holders concerned. It's stored on a server I control, protected by a password, and the access keys never leave that server. The dashboard doesn't change campaigns or collect information about the people who see the ads. I don't sell this data, use it for advertising, or share it with anyone other than the account holder it belongs to.
The dashboard's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can withdraw access at any time: for Google, at myaccount.google.com/permissions; for Meta, by removing the system user or app in Business settings; for LinkedIn, under Settings → Data privacy → Permitted services. When access is withdrawn or an engagement ends, I delete the stored data for that account.
Apps and other sites
My apps and other sites have their own privacy policies, which apply instead of this one. For example: Dead End Drive and Tokoloshe Tower Defence.
Your rights
Under South Africa's Protection of Personal Information Act (POPIA), the GDPR and similar laws, you can ask what personal information I hold about you and have it corrected or deleted. Email me and I'll respond within 30 days. In South Africa you can also complain to the Information Regulator.
Changes to this policy
If I start handling information differently, I'll update this page and change the date at the top.