Plain words about private matters
Privacy Policy
Rusty Dusty Bricks is a personal hobby and project website operated by Dustin Lester. This policy explains what information may be processed when you visit, why it is used, and the choices available to you.
Effective date: August 13, 2026
Optional and blocked until affirmative consent.
Used to deliver and respond to the message you send.
Rusty Dusty Bricks does not sell personal information.
1. Who operates the site
This website is operated by Dustin Lester under the public-facing name Rusty Dusty Bricks. Rusty Dusty Bricks is a personal brand and is not currently a separate company or legal entity.
2. Hosting and security information
The site is hosted and delivered through Cloudflare. Like most hosting and security providers, Cloudflare may process technical request information such as an IP address, requested URL, browser headers, date and time, device or browser characteristics, and security signals. This information is used to deliver the site, maintain reliability, detect abuse, and protect the website.
Rusty Dusty Bricks does not use Cloudflare’s technical security information to build advertising profiles.
Protected owner-only administration tools may send owner-uploaded project images to Cloudflare Workers AI to generate accessibility alt-text suggestions. This is not a public visitor upload feature. Generated text and its source are stored in the site’s Cloudflare D1 database, while project images remain in Cloudflare R2. The owner may edit or replace any generated description.
3. Cloudflare Web Analytics and performance monitoring
The site uses Cloudflare Web Analytics to measure aggregate page traffic and real-user performance. Cloudflare automatically injects a lightweight performance beacon on the production site. It may report page views, visits, page-load timing, Core Web Vitals, page path, referring site, country, broad device type, browser, and operating system.
Cloudflare states that Web Analytics does not collect or use visitors’ personal data, does not use cookies or browser storage, and does not fingerprint individuals. A source IP address is received as part of ordinary HTTP request handling, but Cloudflare states that it is discarded at the nearest Cloudflare data center and is not stored in the Web Analytics core databases or logs. Cloudflare Web Analytics also does not log URL query strings.
Cloudflare Web Analytics is separate from optional Google Analytics 4. It runs without setting Cloudflare Web Analytics cookies and is not controlled by the site’s Accept analytics or Decline preference. That preference applies only to Google Tag Manager and Google Analytics.
4. Information submitted through the contact form
If you use the website contact form, the site processes the information you voluntarily provide:
- Your name
- Your email address
- The topic you select
- The contents of your message
This information is used only to deliver the message, prevent misuse of the form, and respond to your inquiry.
The contact form is protected by Cloudflare Turnstile. Turnstile evaluates browser, device, network, and interaction signals to help distinguish legitimate visitors from automated abuse. The verification result is validated by the website’s server-side function before a message is accepted.
The website does not write the contents of contact-form submissions to its own database. To enforce a limit of one successfully delivered message per email address per hour, the site stores a keyed HMAC identifier derived from the normalized email address, the last successful delivery time, and a short in-progress reservation. The limiter record does not contain the plaintext email address or the visitor’s IP address. Cloudflare Pages and Turnstile process the submission and security verification, Resend processes delivery of the email, and Google Gmail receives the resulting message. Those providers may retain operational, security, and delivery records according to their own policies.
5. Optional Google Analytics
The site may use Google Analytics 4 (“GA4”) to understand aggregate traffic and site usage. GA4 is optional and is not loaded until analytics has been enabled on the site and you affirmatively choose to accept analytics.
When accepted, GA4 may process information such as:
- Pages viewed, page titles, and visit timestamps
- Referring pages and campaign parameters
- Convention QR-code and social-media campaign tags
- General session and engagement measurements
- Scroll activity and outbound-link clicks
- Approximate geographic area, such as country or region
- Broad browser, operating-system, screen, and device details
- A pseudonymous browser identifier and session information
Google states that GA4 uses IP addresses at collection time for routing, security, and approximate geographic information. Raw IP addresses are not made available in Rusty Dusty Bricks Analytics reports.
The site does not create or send a custom GA4 User-ID. Names, email addresses, contact-form messages, precise locations, and other directly identifying information must not be placed in Analytics events, URLs, dimensions, or parameters.
7. How information is used
Information processed through the site is used to:
- Deliver, secure, and maintain the website
- Detect spam, bots, attacks, and other misuse
- Deliver and respond to contact-form messages
- Measure aggregate page traffic and performance through Cloudflare Web Analytics
- Understand optional Google Analytics traffic and site usage after consent
- Measure convention QR codes and campaign links through optional Google Analytics
- Learn which pages and outbound links visitors find useful
- Diagnose broad usability, reliability, or performance issues
- Guide future improvements to the website
- Generate and maintain accessibility alt text for owner-uploaded project images
Analytics is not used for behavioral advertising, retargeting, or building advertising profiles. At launch, the site does not use a custom GA4 User-ID, Google Signals, user-provided data collection, ads personalization, or a Google Ads connection.
8. Data retention
If GA4 is enabled, event-level and user-level Analytics data is configured for retention of up to 14 months. Aggregated reports may remain available according to Google Analytics settings and service behavior.
Cloudflare states that unsampled Web Analytics beacon data is kept for seven days and is then aggregated for longer-term reporting. Cloudflare currently makes Web Analytics dashboard data available for the previous six months.
Contact messages may remain in the Rusty Dusty Bricks Gmail inbox for as long as reasonably needed to respond, maintain appropriate records, prevent abuse, or comply with legal obligations. Pseudonymous contact rate-limit records are targeted for deletion after approximately 30 days. Expired records are removed opportunistically during later contact-form requests and may also be removed manually when responding to a verified privacy request. Cloudflare, Resend, and Google may retain operational records under their own retention practices.
AI-generated image descriptions, owner edits, provenance, daily request counts, and one-time backfill progress may remain in Cloudflare D1 for as long as the related project media or operational record is retained.
A locally stored analytics preference remains only as long as reasonably needed to remember your choice, or until it is removed through the preference control or your browser settings.
9. External websites and service providers
The site links to services including Instagram, TikTok, YouTube, Rebrickable, Ko-fi, GFLUG, RenLUG, and other community websites. Following an external link takes you to a service governed by its own privacy policy and practices. Rusty Dusty Bricks does not control those services.
Where practical, the site uses ordinary links and lightweight preview cards rather than automatically loading third-party social media embeds. Cloudflare also processes owner-uploaded project images through its Workers AI service when the protected alt-text tool is used.
11. Children’s privacy
This public hobby website may be viewed by families, but the site does not knowingly request personal information from children. Children should use the contact form, email, or social-media services only with a parent or guardian’s involvement.
A parent or guardian who believes a child submitted personal information may use the Contact page to request review or deletion where reasonably possible.
12. Your choices
Depending on the features currently enabled, you may:
- Decline optional Google Analytics
- Change a prior Google Analytics choice through the site preference control
- Delete or block cookies and local storage through your browser
- Use Google’s Analytics opt-out browser add-on
- Ask about information you voluntarily submitted
- Request correction or deletion where reasonably applicable
The site’s Analytics preferences control applies to Google Tag Manager and Google Analytics. It does not disable Cloudflare Web Analytics, which Cloudflare describes as cookie-free and designed not to collect or use visitors’ personal data.
Rusty Dusty Bricks may need to verify a request before acting on it. Some operational or security records held by service providers may not be directly accessible to the site operator.
13. Privacy and California requests
Whether or not a particular privacy law applies, you may ask Rusty Dusty Bricks to explain, provide, correct, or delete personal information that can reasonably be linked to you. You may also ask about the site’s handling of personal information. Rusty Dusty Bricks does not sell personal information, does not share it for cross-context behavioral advertising, and does not discriminate against anyone for making a privacy request.
To submit a request, use the secure Contact page and choose Privacy or data request. Include the email address you previously used with the site and, if known, a contact-form submission ID, approximate date and topic, or the URL of public content involved. Please do not send government ID or other sensitive documents unless they are specifically requested because less sensitive information was not sufficient.
Rusty Dusty Bricks may verify that the requester is the person to whom the information relates before disclosing, correcting, or deleting it. If the CCPA applies to a request to know, correct, or delete, receipt will be confirmed within 10 business days and a substantive response will be provided within 45 calendar days. A permitted extension of up to 45 additional days will be explained before the first response period ends.
Some information may be retained when reasonably necessary for security, fraud prevention, legal compliance, or another applicable exception. Information in dormant backups may be addressed when a backup is restored or otherwise returned to active use. Any response will explain what was completed, what could not be identified, and any information retained under an exception.
14. Changes to this policy and privacy contact
This policy may be updated when site features, service providers, or legal requirements change. The effective date at the top will be revised when material changes are published.
For privacy questions or requests, use the secure Contact page and choose Privacy or data request as the topic.
Dustin Lester
Rusty Dusty Bricks
rustydustybricks.com