I'm Keith Driscoll, founder of Future Robot NYC — a privacy-first technology company based in New York City. I build tools that analyze network security, privacy policies, and online trust. Privacy isn't a legal checkbox for me; it's the foundation of every system I build. We are in the age of predictive profiling and you should be familiar with how your data is collected, stored, and used online. This policy is my commitment to transparency about how I handle data on this site.
This is my personal website. It runs on infrastructure I own and operate.
This site uses Matomo, an open-source analytics platform I host on my own server at server.futurerobot.nyc. Your data does not leave my infrastructure.
What Matomo collects:
IP address handling: Your IP address is hashed and anonymized before storage. The raw IP is never written to disk. This is implemented at the platform level and cannot be reversed.
No data is sent to Matomo's servers or any third party. This is 100% self-hosted analytics.
Opt-out: Matomo respects the Do Not Track browser header. If DNT is enabled in your browser, Matomo will not track your visit.
If you use the contact form, I collect:
This data is submitted via my API at api.futurerobot.nyc, which runs on a server I own and operate. It is stored in a MySQL database on that server. I use it solely to respond to you. I don't add you to mailing lists without your explicit consent, and I don't share this data with anyone.
Email delivery is handled via SMTP2GO. They process the message in transit but do not store it for marketing purposes. See SMTP2GO's privacy policy for their data handling details.
Links from this site may point to my GitHub repositories. GitHub has its own privacy policy. I don't control what GitHub collects when you visit those pages.
This site does not use cookies and respects do not track requests. No advertising cookies. No third-party cookies.
All data is stored on servers I own and administer. Both servers run Ubuntu 24.04 with active firewalls, fail2ban, SSL/TLS encryption in transit, and no unnecessary public exposure of services.
I do not use cloud storage (S3, GCS, etc.) for any personal data collected through this site.
Regardless of where you're located, you have the right to:
To exercise any of these rights, use the contact form on this site. I'll respond within 30 days.
If you're in the EU, UK, or California, you have specific rights under GDPR and CCPA respectively. The above rights apply to you. I don't sell personal data (per CCPA's definition), I don't engage in profiling, and I don't transfer data outside the US.
The legal basis for processing contact form data (GDPR Article 6) is legitimate interest — you contacted me, so I need your contact info to reply.
This site links to GitHub and other external sites. I'm not responsible for their privacy practices. Check their policies before submitting data to them.
If I make material changes to this policy, I'll update the "last updated" date at the top. I'm not going to add surveillance capitalism to this site in the future — that would be deeply hypocritical given what I build — but if anything substantive changes, it'll be documented here.
For privacy questions or data requests, use the contact form on this site.