California privacy notice
Last updated November 9, 2026.
This notice is for California residents. It adds to our privacy policy and uses the terms defined in the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the CCPA). We honor the rights below for every California resident, whether or not the CCPA's thresholds apply to us.
Personal information we collect
In the past 12 months we have collected the following categories of personal information. We collect it from you, from your browser, and from GitHub when you choose to sign in with it.
| Category | Examples | Why | Disclosed to |
|---|---|---|---|
| Identifiers | Name, email address, IP address, GitHub username and ID | Newsletter, registry accounts, security, replying to you | Hosting, backup and email service providers |
| Internet or other electronic network activity | Pages requested, referring website, browser details in server logs | Delivering and securing the site; visit totals are stored without personal data | Hosting service provider |
| Sensitive personal information: account login | Your registry sign-in (a password hash or a GitHub sign-in) | Signing you in, and nothing else | Hosting and backup service providers |
We do not collect precise geolocation, financial information, government identifiers, biometric information or the contents of your communications with others. We use sensitive personal information only to provide the service you asked for, so the right to limit its use does not apply.
How long we keep each kind of information is described in the privacy policy, under How long we keep it.
No sale or sharing
We do not sell personal information and we do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16. We also honor Global Privacy Control signals as a request to opt out of sale and sharing.
Your rights
- Right to know and access: the categories and specific pieces of personal information we hold about you, where it came from, why we use it and whom we disclose it to.
- Right to delete the personal information we collected from you, with the exceptions the law allows.
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information. We do neither, but you may still send the request or a Global Privacy Control signal.
- Right to non-discrimination: we will not deny you service, charge you differently or give you a different quality of service because you exercised these rights.
How to make a request
Email hello@spillwaycms.com with the subject "California privacy request" and say which right you want to use. We confirm the request within 10 business days and answer within 45 days; if we need up to 45 more days, we tell you why. To protect your information, we verify the request by asking you to confirm it from the email address we have on file. You may use an authorized agent; we will ask for your signed permission and may ask you to verify your identity directly.
Shine the Light
We do not disclose personal information to third parties for their own direct marketing purposes.
Contact
KWALL LLC, United States. Email hello@spillwaycms.com.