Privacy notice | Alpesh Nakrani

The short version

One analytics tool, Google Analytics 4, enabled by default and run through a Partytown web worker.
One visitor-identification tool, Apollo, off by default and loaded only if you opt in.
No advertising, no remarketing pixels, no cross-site tracking.
Book downloads require an email subscription through Kit. A name is optional, and you can unsubscribe from emails at any time.
A short-lived first-party cookie authorizes the PDF download after a successful signup.
Two other third parties load on page view today: Google Fonts and the Cal.com booking embed. Both are named below.

Cookies this site sets

The first-party cookie cc_cookie stores your answer to the cookie banner for six months so you are not asked on every page. Switching it off is not possible, because recording that choice is what it does.

After a successful book signup, the signed, first-party cookie book_download lets your browser retrieve the selected PDF. It expires after 10 minutes, is HttpOnly so page scripts cannot read it, and contains download authorization rather than your email address. It is used only to complete the download you requested.

By default, Google Analytics writes_ga and _ga_31YWZ22SNP, both lasting two years. The first tells one browser from another. The second holds session state for this property.

Book subscriptions and downloads (Kit)

When you choose to subscribe and download a book, the site sends your email address, your name if you enter one, the selected book, and the page you signed up from to Kit. I use Kit to manage book subscribers and send book and writing updates. The PDF download starts after Kit accepts your signup; you do not need to create a site account.

The signup goes through this site's server. Kit receives the subscription details when you submit the form, rather than loading a tracking embed on every book page. Your subscription and unsubscribe preferences are managed in Kit. Use the unsubscribe link in an email to stop future updates, or contact me below to ask about your subscriber data or request its deletion.

Analytics and consent settings

The measurement I care about is which essays hold attention. That is it. There is no funnel scoring you, no user-level export, no advertising audience being built.

Technically: all seven Google Consent Mode v2 types start as granted before the Google tag is configured. The gtag.js library and its configuration execute off the main thread through Partytown. No Google Ads or remarketing tag is installed; granting the advertising consent types does not add one.

Turning analytics off sends a denied update for analytics, advertising, and personalization consent, while functionality and security storage remain granted. GA cookies are cleared. Because this is advanced consent mode, the Google tag remains loaded and may send limited, cookieless measurements after optional consent is withdrawn.

Google acts as the data processor for that analytics data and may process it outside your country. Their handling is covered byGoogle's business data policy.

Visitor identification (Apollo)

Apollo is a B2B sales tool. If you opt in through the cookie preferences, it matches your IP address against a business database to tell me which company a visit came from, not who you are personally, and not your name or email. I use this to see whether people from companies I work with or want to work with are reading, which is useful signal for an advisory practice.

This one is off by default, unlike Google Analytics, and for a technical reason as much as a preference: once Apollo's script has loaded it has no consent-signal API to receive a later "stop." So the choice happens before the request is made, not after. If you never opt in, no request to assets.apollo.io happens and nothing is sent. Apollo Inc. is a US company; their handling is covered byApollo's privacy policy.

Other third parties that load

Being straight about these, because a cookie banner that ignores them would be theatre.

Google Fonts (fonts.googleapis.com,fonts.gstatic.com) serves the site's typefaces and currently loads on every page view, which means your IP address reaches Google to fetch them. It sets no cookie. Self-hosting these files is a known fix on my list.
Cal.com (app.cal.com) powers the booking popup. Its embed script also loads on page view today, and Cal.com may set its own storage once you open the booking window. Their terms are atcal.com/privacy. Deferring this script until you actually click Book is also on the list.
Cloudflare hosts the site. Like any web server, its edge logs request data (IP address, user agent, URL) to serve pages and absorb attacks. I do not build profiles from those logs.

Outbound links (LinkedIn, YouTube, X, GitHub, Amazon, ViitorCloud, and the "ask an AI about this page" links) only reach those companies when you click them. Nothing is prefetched to them.

Your choices

Change or withdraw consent any time:. Withdrawing analytics clears the GA cookies.
Block or delete cookies in your browser settings. You can browse without cookies, but the book download needs its temporary authorization cookie.
Unsubscribe from book and writing updates using the unsubscribe link in an email. Cookie preferences do not change your email subscription.
Opt out of Google Analytics everywhere withGoogle's browser add-on.
Global Privacy Control and Do Not Track do not automatically change this site's current setting; use the cookie preferences above or your browser's cookie controls to turn analytics off.

Rights and contact

Depending on where you live, you may have the right to ask what is held about you, to have it deleted, or to object to processing. If you subscribed for a book, this includes the subscriber details held in Kit. Contact me to ask about those details or the other data described in this notice.

Reach me onLinkedIn, which is the contact route this site uses.

Changes

If the categories or the tools change, the banner asks again rather than assuming your old answer still applies. This notice was last updated 2026-09-06.