Privacy Policy

Operator

This website and the associated SMS notification account are operated by Howard Kessa as a sole proprietor ("the Operator", "I", "me"). There is no company, no employees, and no third-party users.

Scope

This policy covers two things:

• This website (howard.thekessas.xyz), which exists only to publish these legal references.
• The SMS notification account the Operator uses to send operational notifications from personal home-lab and cloud automations to the Operator's own verified mobile phone number.

Data the Operator processes

The only personal data processed is the Operator's own:

• The Operator's mobile phone number, registered as the sole recipient of the SMS account.
• The content of messages the Operator's automations send to the Operator's own phone — for example, backup success and failure notices, calendar reminders, home automation events, and cloud infrastructure alerts.

No data is collected from any third party. No one else is a user of the Operator's SMS account or this website.

Data collected from visitors to this website

This website collects nothing from visitors. It does not use cookies. It does not run analytics. It does not run trackers, pixels, or advertising code. It does not use third-party fonts or CDNs. The server produces standard web-server request logs (IP address, timestamp, requested path) for operational and security purposes; those logs are not shared with anyone and are retained only as long as needed to diagnose problems.

How data is used

Messages the Operator generates are delivered to the Operator's own phone through Twilio and the mobile carrier network (T-Mobile, AT&T, Verizon, and their peers). No other use is made of the phone number or message content.

Data sharing

The Operator does not sell, rent, trade, or otherwise share any personal data with third parties, with the following necessary operational exceptions:

• Twilio, the SMS service provider, processes the phone number and message content as needed to deliver each message.
• The mobile carriers (T-Mobile, AT&T, Verizon, and their peers) process the phone number and message content as needed to route each message across the telecommunications network.
• Disclosures required by law, court order, or valid legal process.

Data retention

Messages are retained on the Operator's own devices according to standard device and carrier retention. The Operator retains no separate database of recipient data, because there are no other recipients.

Security

Credentials used to run the SMS automations are stored in encrypted secret storage (a GCP Secret Manager secret and/or a self-hosted password manager). This website is served only over HTTPS with a Let's Encrypt certificate.

Children

This service is not directed at children under 13, and no one other than the Operator (an adult) uses it.

Changes to this policy

The Operator may update this policy to reflect changes to operational arrangements or to comply with applicable regulations. The effective date above will be updated when changes are made.

Contact

For privacy inquiries: howard@thekessas.xyz