Privacy Policy

Last updated: October 12, 2026

tylamb.com is a personal website run by Ty Lamb. It's my resume plus a set of small projects I've built. This page explains what information the site keeps and why. It's written to be read, not to cover every legal base.

If you just browse

Nothing personal is collected. There are no analytics scripts, ad networks, or tracking pixels. The web server keeps ordinary access logs (IP address, page requested, browser type) for a short time to diagnose problems.

If you sign in

Only people I've added to the site's user list can sign in. For those people, the site stores:

• Name and email address, which I enter when I add you.
• A session record when you sign in, so you stay signed in for up to 30 days. The browser cookie holds only a random ID.
• Email sign-in codes, stored only as a one-way hash and discarded after 10 minutes or first use. The code itself is sent to you by email through Resend, the email provider.
• Passkeys, if you add one: the public key, a counter, and the nickname you gave it. The private key never leaves your device. I cannot use it to sign in as you anywhere else.
• Google or Microsoft sign-in, if you use it: the stable account ID those services give me and the email address they report. I ask them only for your name and email. I don't get access to your contacts, mail, files, or anything else in those accounts.

There are no passwords on this site, so there is no password to leak.

Data you enter into projects

Some projects on this site save what you type (for example, a calculator that keeps your history). That data is tied to your user record so you can see it again. Each project's page says what it keeps.

The tic-tac-toe game (Tic-Tac-Go) sets a cookie holding a random ID so a guest can keep their seat in a game; it is not linked to anything else. It records every game: who played (your user record if you're signed in, otherwise just "Guest"), and each square claimed with its time, so games can be replayed and the stats on its page work.

Signed Invoice: emails and text messages

The Signed Invoice demo lets a signed-in user send a delivery receipt to someone to sign. To do that, the sender enters the recipient's name, email address and, optionally, mobile number. Those are used only to send that one signing link, the 6-digit signing code (by email) and the signed copy. When the recipient signs, the site keeps the signature, the time, their IP address and browser, and, only if they choose to share them, their location and a photo.

Text messages are sent through Twilio, and only after the sender confirms you gave them your mobile number and agreed to get the signing link by text. That confirmation, who made it and when are kept with the receipt's audit trail. There are no marketing or recurring texts. The details are on the Text Messaging Terms page. Reply STOP to any message to opt out, or HELP for help; message and data rates may apply. Mobile numbers and text-message consent are not shared with or sold to third parties or affiliates for marketing or promotional purposes.

Demo receipts made without signing in are deleted after 7 days.

Where it lives and who sees it

Everything is stored in a PostgreSQL database on a server I rent from DigitalOcean in New York. Transactional email goes through Resend, and Signed Invoice text messages through Twilio. No data is sold, shared, or used for advertising. I'm the only administrator.

Your choices

• Sign out any time from your account page; that deletes the session.
• Remove any passkey from your account page.
• Ask me to delete your account entirely by emailing ty@tylamb.com. Deleting a user removes their sessions, passkeys, linked sign-ins, and project data.

Changes

If this policy changes in a way that matters, the date at the top will change and signed-in users will be told on their next visit.