Legal
Privacy Policy
How I handle personal information on tomchap.com and in the personal projects I publish under my own name. This is the personal twin of the C6 Enterprises policy — same commitments, different operator.
Last updated: 1 September 2026
01 Who and what this covers
This policy is issued by Tom Chapman, an individual based in Greenville, South Carolina, United States ("I", "me"). It applies to tomchap.com, including the interactive demos at /demos, and to personal projects I publish under my own name rather than through a company.
tomchap.com is a personal site. It is a place to read about work I have done — it has no accounts, no sign-in, no shopping cart, and no newsletter. There is very little for it to collect, and this policy says so plainly rather than padding the point.
Two companies this policy does not cover
C6 Enterprises LLC — the games, plugins, web apps and automation work — is a separate limited liability company with its own privacy policy at c6ellc.com/privacy. If your question is about one of those products, that is the policy that governs it.
Tom Chapman Insurance is a third, separate limited liability company — its own LLC, not a division of C6 and not covered here. Applications, health information, Medicare eligibility, and policy or claims data are handled by that agency under its own privacy practices and the confidentiality rules that apply to a licensed insurance agency. Never send insurance information through this site.
Per-app notices
Individual apps publish their own notice covering what that app does specifically. They are C6 Enterprises LLC documents — mirrored here for convenience, with the authoritative copy on c6ellc.com.
02 The short version
- This site sets no cookies and runs no analytics. Nobody is counting you.
- The demos contain no real data — every person, company, figure and message in them is invented, and they send nothing anywhere.
- If you email me, I have your email and what you wrote. That is the extent of it.
- Nothing is ever sold, rented, or traded.
- No ad networks, no ad pixels, no cross-site tracking.
- You can ask what I hold about you, ask me to correct it, or ask me to delete it — by email, at no cost.
03 What is collected
Information you hand over
There is nothing else to hand over. This site has no forms, no accounts, and no payments.
Information collected automatically
The demos
The demos at /demos are self-contained rebuilds of software that runs privately on my own hardware. They are populated entirely with fictional data — no real person, client, message, meeting or figure appears in any of them. They run in your browser and do not send what you click anywhere. A demo may remember a setting in your browser's local storage so it behaves sensibly if you come back; that stays on your device and is never transmitted to me.
04 Why it is collected
- To answer you. Replying to an email requires your email address and what you wrote.
- To keep the site up and safe. Server logs are how the hosting provider blocks attacks and how I find out that something is broken.
- Nothing else. There is no profiling, no advertising, no scoring, and no other purpose.
05 What I never do
- I do not sell, rent, or trade your personal information — not to data brokers, not to advertisers, not to anyone, for money or for anything else of value.
- I do not embed advertising networks, ad pixels, or third-party marketing trackers.
- I do not track you across other companies' websites.
- Emailing me does not add you to a mailing list. There isn't one.
- I do not publish or quote what you write to me privately.
08 How long it is kept
- Email you send me — kept while the conversation is live and for a reasonable period afterwards, so a follow-up on the same subject has context. Deleted on request.
- Server logs — short-lived, rotated out automatically by the hosting provider. They exist for debugging and abuse handling, not to build a history of you.
- Everything else — there is nothing else. No database of visitors exists, so there is nothing to retain.
09 Security
The site is served over HTTPS. The small amount of information described above is reachable only by me and by the two providers listed in section 6. The most effective security measure here is simply that almost nothing is collected — there is very little to lose.
No system is perfectly secure, and it would be dishonest to claim otherwise. If a breach affecting your personal information happened, I would tell you promptly and plainly: what happened, what was exposed, and what to do about it.
10 Your choices and rights
Wherever you live, you can ask me to:
- Tell you what personal information I hold about you and why.
- Give you a copy of it.
- Correct anything that is wrong.
- Delete it, subject to anything I am legally required to keep.
- Stop or limit a particular use of it.
- Withdraw consent you previously gave, without affecting what was done before you withdrew it.
Email privacy@c6ellc.com and say what you want. That address reaches my personal inbox — it is the same one this site already uses for contact, and running one address rather than three means nothing gets lost. You will get an acknowledgement, and a substantive answer within 30 days. It is free, and you will never be treated worse for asking.
I will honour a request after reasonable verification that the address is yours — which usually just means replying from it. That check protects you from someone else requesting your data.
11 US state privacy rights
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas and other states with comprehensive privacy laws have the rights listed in section 10, plus the right to appeal a refused request and the right not to be discriminated against for exercising them. Use the same address and say which state you are in, so the correct deadlines apply.
I do not sell personal information, and I do not share it for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act and the equivalent laws of other states. I have not done so in the preceding twelve months, including in respect of anyone under 16. There is therefore no "Do Not Sell or Share My Personal Information" mechanism to offer — there is nothing to opt out of.
An authorised agent may make a request on your behalf with written proof of authorisation.
12 If you are outside the US
I operate from the United States, and the little information described here is processed and stored there and in other countries where the hosting provider operates. If you are in the United Kingdom, the European Economic Area, or another region with data protection law, visiting this site means that information is transferred to the US, where privacy law differs from your own.
Where the UK GDPR or EU GDPR applies, the lawful bases I rely on are legitimate interests (keeping the site up, secure and free of abuse) and consent (anything you chose to send me, withdrawable at any time). You also have the right to complain to your national supervisory authority — though writing to me first will usually be faster.
13 Children
This site is not directed to children under 13, and I do not knowingly collect personal information from them. If you believe a child under 13 has sent me personal information, email privacy@c6ellc.com and I will delete it promptly.
14 Other people's sites
This site links out to places I do not control — GitHub, LinkedIn, YouTube, WhatsApp, Facebook, c6ellc.com, tomchapmaninsurance.com, and others. Following a link takes you under that destination's privacy policy, not this one. They are usually a good deal less restrained than this page about what they collect.
15 Changes to this policy
I will update this page if what I do changes. The "last updated" date at the top always reflects the current version. If a change materially reduced the protection of information already collected, I would say so on the site before it took effect rather than quietly moving the date.
16 Contact
Privacy questions, requests about your data, or anything on this page that reads as vague:
Tom Chapman · Greenville, South Carolina, United States. A postal address for formal legal notice is available on request.