Privacy Policy

Scope and responsibility

Sam Romain operates samromain.com, a personal website about his work, commentary and media appearances. This policy explains information handled through the website and related communications, and separately describes private connected Google services used by the account owner. References to “I,” “me” or “my” mean Sam Romain.

This policy does not govern the separate websites or operations of organizations mentioned here, social networks, publishers or other third parties. Their own privacy notices apply to their services.

Information collected

• Website delivery and security. Vercel hosts this site. Requests to the site expose technical information such as IP address, requested URL, browser and device information, timestamps and referrer information to hosting and network providers. They may process request logs to deliver the site, troubleshoot errors and prevent abuse.
• Website analytics. The site includes Vercel Web Analytics to understand traffic and improve content. It measures page visits, referrers, approximate location and browser/device characteristics. Vercel describes this analytics service as using aggregate statistics and short-lived request-derived identifiers rather than third-party analytics cookies, without tracking visitors across unrelated sites. Hosting logs and third-party embeds are separate from this analytics service. See Vercel’s analytics privacy documentation and privacy policy.
• Embedded media. The homepage includes a YouTube video player. When it loads, your browser connects to Google/YouTube, which can receive your IP address, device and page information and may use cookies or similar technologies, including for its own measurement and advertising under its policies. Loading an embed can transmit data even before you press play. Your Google sign-in state and settings may affect that processing. See Google’s Privacy Policy.
• Messages you choose to send. If you email me or contact me through a linked social service, I receive the contact details, message contents, attachments and other information you provide. I use this information to respond, coordinate requests and keep relevant correspondence. The email or social provider also processes the communication under its own terms.

The website currently has no visitor account registration, checkout, newsletter signup or contact form. Do not send passwords, payment information or other unnecessary sensitive information in a message.

Advertising and tracking

I may use advertising platforms, including Meta, Google and LinkedIn, to promote my personal brand, content and appearances. Advertising and measurement technologies may include cookies, pixels, tags and server-side tools. These technologies may collect page visits, interactions, referrers, device and browser information, IP addresses and advertising identifiers to measure campaign performance, attribute conversions, limit repeat ads and support interest-based advertising or retargeting.

Advertising audiences may be based on website interactions or contact information provided for marketing purposes, subject to applicable permissions and choices. Contact information used for audience matching may be transformed into hashed identifiers; hashing does not make that information anonymous. Advertising platforms may combine information they receive with information from your use of their services, subject to their own privacy policies and your account settings. Google API data from connected Gmail or Calendar accounts is excluded from advertising, retargeting and audience creation.

Disclosure of information for targeted advertising may qualify as a “sale” or “sharing” under applicable privacy laws, even when no money changes hands. Optional advertising tracking is subject to applicable consent and opt-out requirements. You can manage platform advertising preferences, use browser controls and submit privacy requests as described below. This policy does not replace any required consent, and browsing the website alone is not consent to optional advertising tracking.

Connected Google services

Separately from public website browsing, the account owner uses a private assistant connection to Gmail and Google Calendar. This is not a public Google sign-in feature and does not give the website access to visitors’ Google accounts. With the account owner’s authorization and the permissions granted through Google, the connection can access email contents, headers, participants, labels and attachments, and calendar details such as events, attendees, locations and availability. It is used to search, summarize and organize information, draft or send messages, and create or update calendar events as authorized by the account owner.

Relevant Google data and instructions may be sent to configured AI model providers to carry out those tasks, and summaries or responses may pass through the messaging service used by the account owner. Authorized messages and invitations are also delivered to their intended recipients. This processing is not exclusively local: provider processing and retention depend on the selected service and account settings. Local conversation history, tool results, downloaded files and cache may retain copies until removed; revoking access does not automatically erase those copies or provider-held records.

Use of information received from Google APIs, including any transfer to another app, will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google API data is used only to provide or improve the account owner’s requested assistant features. It is not sold, used for advertising, retargeting or advertising audiences, or used to train generalized AI models. Transfers and any human access are limited to what that policy permits, including authorized service functionality, specific consent, security needs or legal obligations.

The account owner can revoke the connection at Google Account connections and stop using the integration. Revocation prevents further authorized access through that connection, but does not delete source email or calendar records. To request deletion of retained assistant history, cache or downloaded Google data, contact the address below. Requests will be handled subject to applicable retention obligations and provider deletion capabilities.

How information is used and disclosed

Information is used to operate and protect the website, understand readership, respond to communications, manage requested activities and meet legal obligations. Hosting, analytics, email, messaging and other service providers process information needed for those functions. Information may also be disclosed when required by law, to address fraud or security incidents, to protect legal rights, or with your direction. The stricter Google data restrictions above continue to apply to connected Google services.

I do not operate a business selling visitor contact lists. Advertising-related disclosures are subject to the applicable definitions of sale, sharing and targeted advertising, and to the privacy choices described in this policy.

Retention, security and international processing

Messages and related records are kept for as long as reasonably needed for the request, ongoing correspondence, security, recordkeeping or legal obligations. Hosting, analytics and communications providers have their own retention schedules. There is no single automatic deletion period for all records, and backups or legal requirements may delay complete deletion.

Reasonable measures are used to protect information, but no website, device or transmission method can be guaranteed secure. Avoid sending sensitive information unnecessarily. The site is operated from the United States, and providers may process information in the United States or other countries whose privacy laws differ from yours. Where applicable, legally required safeguards must be used for international transfers.

Your choices and privacy rights

You can limit cookies and embedded content through your browser, use content-blocking tools, and manage advertising settings directly with Google and other platforms. Blocking these features may affect media playback or site functionality. External social links are optional. If you receive promotional communications from me, you can ask me to stop or use any unsubscribe mechanism provided.

Depending on where you live and which laws apply, you may have rights to access, correct, delete or receive a copy of personal information; object to or restrict processing; withdraw consent; and opt out of sale, sharing or targeted advertising. You may also have rights to use an authorized agent, appeal a denied request or complain to a data protection authority. These rights are subject to applicable exceptions and identity verification, and exercising them will not result in unlawful discrimination.

Submit requests using the contact below and describe the information and action involved. Please do not send identity documents unless requested through an appropriate channel. Where laws requiring a legal basis apply, processing must rely on an appropriate basis, such as consent, responding to your request, legitimate interests in site operation and security, or a legal obligation.

You can submit requests to opt out of sale, sharing or targeted advertising using the contact below. Global Privacy Control is a browser signal for communicating an opt-out preference; its legal effect depends on applicable law. The site does not currently provide a cookie preference center or a custom automated response to Global Privacy Control or Do Not Track signals. Browser settings alone may not control all processing by embedded third-party services.

Children’s privacy

This website is intended for a general audience, not directed to children under 13, and I do not knowingly solicit their personal information. If you believe a child has provided personal information, contact me so it can be reviewed and appropriately removed.

Changes and contact

This policy may change as the site or its practices evolve. Updates will appear here with a revised date, and additional notice or consent will be provided where required. New uses of connected Google data require the disclosures and authorization required by Google’s policies.

For privacy questions or requests, contact Sam Romain at s.romain93@gmail.com. See also the Terms of Use.