Privacy Policy

Scope and who we are

This Privacy Policy applies to shiftkeysoftware.com and the pages, articles, project descriptions, résumé materials, subscription forms, and related website features operated by Shift Key Software LLC (“Shift Key Software,” “Shift Key,” “we,” “us,” or “our”).

It does not govern a client website that we build, a third-party website that we link to, or a separately contracted service. Those services may have their own policies and terms.

Information we collect

Information you choose to provide

• Newsletter subscriptions: your email address, the publication you selected (Salesforce Field Notes or Apple Development Journal), and the subscription date.
• Communications: the name, email address, company details, project information, and message content you choose to send by email or another communication channel.
• Scheduling: when you use the Cal.com booking link, Cal.com collects the information requested on its booking form. We receive the booking details needed to hold and prepare for the meeting.

Information collected when the site is used

• Request and security data: Cloudflare, our hosting and security provider, may process IP address, browser and device information, requested URL, referring page, approximate location derived from an IP address, timestamps, performance data, and security signals.
• Article-view data: the article path, a one-way hash of a random browser identifier, the calendar day of the view, and a creation timestamp. We count the same browser only once per article per day.
• Aggregate statistics: total article views and total subscribers for each publication. Public count displays do not reveal subscriber email addresses or individual readers.

We do not ask for payment-card information, government identifiers, account passwords, precise location, health information, or other sensitive personal information through this website.

Analytics, cookies, and local storage

The site uses limited first-party analytics to show article view counts. When you open a published article, the browser creates a random identifier and stores it under shiftkey-reader-id in local storage. The identifier is sent to our server, converted to a SHA-256 hash, and stored with the article path and day. The raw identifier is not stored in the article-view database and is not combined with a subscriber email address.

We also receive traffic, performance, and security reporting through Cloudflare. Cloudflare processes website requests and may create aggregated network and traffic statistics. The site does not currently include Google Analytics, Meta Pixel, cross-site advertising trackers, or behavioral advertising cookies.

Shift Key does not intentionally set first-party advertising cookies. Cloudflare may use strictly necessary cookies or similar technologies for security, traffic management, and reliable delivery. Blocking those technologies may affect parts of the site.

What the control does: opting out removes the current article-view identifier and saves an opt-out preference in this browser. Article pages will continue to display the public total but will not add a view from that browser. The site also avoids recording an article view when the browser sends Global Privacy Control or “Do Not Track.” Clearing all browser storage will remove both the identifier and the saved opt-out preference.

How we use information

We use the information described above to:

• deliver the website, keep it secure, diagnose errors, and prevent misuse;
• respond to questions, evaluate project requests, schedule meetings, and provide requested services;
• manage the two blog subscription lists and send the publication a person selected;
• measure article readership and understand which content is useful;
• maintain business records, enforce our terms, and comply with legal obligations; and
• protect the rights, safety, and property of Shift Key, visitors, clients, and others.

Where applicable law requires a legal basis, we rely on your consent, steps taken at your request, performance of an agreement, our legitimate interests in operating and securing a small-business website, and compliance with legal obligations.

When we share information

We do not sell personal information, rent subscriber lists, or share personal information for cross-context behavioral advertising. We may disclose information only as reasonably necessary to:

• Service providers: Cloudflare for hosting, database storage, delivery, security, and traffic reporting; our email and communication providers for messages and publication delivery; and Cal.com when you choose its scheduling service.
• Professional support: lawyers, accountants, insurers, security professionals, or other advisers subject to appropriate duties of confidentiality.
• Legal and safety needs: comply with law, legal process, or a valid government request; investigate fraud or misuse; or protect rights, property, and safety.
• Business changes: support a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to appropriate safeguards.
• Your direction: fulfill a request or disclosure you have clearly authorized.

Retention and security

We retain subscription information until you unsubscribe, request deletion, or the publication is discontinued, unless a longer period is required for legal or recordkeeping purposes. Communications and client inquiries are generally retained while we respond, evaluate or perform work, maintain ordinary business records, resolve disputes, and meet legal obligations.

Hashed article-view records and aggregate traffic statistics may be retained as historical analytics because they are designed not to directly identify a named person. We periodically review retained data and may delete or aggregate it when it is no longer reasonably needed.

We use reasonable administrative, technical, and organizational safeguards appropriate to the information involved. No website, transmission method, or storage system can be guaranteed completely secure, so we cannot promise absolute security.

Your choices and privacy rights

• Subscriptions: ask to unsubscribe at any time by emailing jacob@shiftkeysoftware.com and identifying the publication.
• Article analytics: use the control on this page, Global Privacy Control, or a browser “Do Not Track” setting.
• Browser controls: clear or block local storage and cookies using your browser settings.
• Access, correction, or deletion: request a copy, correction, or deletion of personal information reasonably linked to you.
• Objection or restriction: where applicable, object to or ask us to restrict particular processing.

Send a request to jacob@shiftkeysoftware.com. We may need to verify your identity and may retain information when required or permitted by law. We will not discriminate against you for exercising an applicable privacy right.

Because article-view identifiers are hashed and are not tied to an email address or name, we may be unable to locate a specific historical view record as belonging to you.

Regional disclosures

United States state privacy notices

During the preceding 12 months, this site may have collected identifiers (such as email address and IP address), internet or network activity (such as requested pages, browser information, and article-view data), approximate geolocation derived from an IP address, and communications you sent us. Sources, uses, and recipients are described above.

We do not knowingly sell or share personal information as those terms are defined by applicable U.S. state privacy laws, and we do not knowingly use sensitive personal information to infer characteristics about a person. If an applicable state law grants you additional rights, you may submit them using the privacy email above.

European Economic Area, United Kingdom, and similar jurisdictions

Where applicable, you may have rights to access, correct, erase, restrict, object, receive portable data, withdraw consent, and complain to your local data-protection authority. Withdrawal of consent does not affect processing completed before withdrawal. Information may be processed in the United States and other countries where our providers operate, subject to legally recognized transfer safeguards when required.

Children and international use

This website is intended for a general business and professional audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and delete it where appropriate.

Visitors outside the United States understand that information may be transferred to and processed in the United States, where privacy laws may differ from those in their location.

Third-party services and links

The site links to external services, including Cal.com, Wave, GitHub, LinkedIn, Product Hunt, X, Facebook, Telegram, WhatsApp, featured client websites, and article sources. Their privacy practices are controlled by them, not Shift Key.

For the primary infrastructure and booking services used by this site, review the Cloudflare Privacy Policy and Cal.com Privacy Policy.

Changes and contact

We may update this policy when the website, our providers, or legal requirements change. The revised policy will be posted here with a new “last updated” date. Material changes may also be highlighted on the site when appropriate.