Privacy Policy

Last updated: October 22, 2026

This policy covers the Cloudflare-hosted website of Justin De Santos Books. Our free printables are available when you enter your email address. You can also choose to subscribe to our email updates. Both are handled through Kit.

Who we are

Dry Bones Entertainment LLC operates Justin De Santos Books. Our website introduces the “Do I Have To?” Timmy books and provides resources for parents, caregivers, educators and other adults. For privacy questions or requests, email info@justindesantos.com.

Browsing and downloading

Cloudflare hosts and delivers these pages and files. It processes technical information, such as IP addresses and network traffic information, to deliver the website, maintain reliability and protect against abuse. Requests for pages and PDFs pass through Cloudflare even when you do not contact us.

Cloudflare also supplies network-error reporting instructions to supported browsers. If a connection fails, the browser may send Cloudflare a diagnostic report containing the requested address, error type and connection details. Cloudflare describes deriving network and approximate regional information to diagnose outages, and discarding the client IP after processing within this reporting system. This is separate from other hosting and security records. See Cloudflare’s network-error reporting documentation.

To get a free printable, you enter your email address on the printable’s page. When you submit, your browser sends the address directly to Kit, and the page then opens the download. If you leave the newsletter box unticked, Kit keeps your address on a download-only list; we use it to provide and keep a record of the printables you requested, not to send newsletters. Ticking the box also starts a newsletter signup, described below. The copy you save is stored on your device or wherever you choose to save it.

If you visit justindesantos.com without “www”, our domain registrar’s forwarding service receives that request and redirects you to the matching page on www.justindesantos.com. The forwarding service processes technical request information and may set a session cookie named crumb for security. This cookie was observed during our live redirect check. See the registrar’s cookie documentation and privacy notice.

Contacting us

The contact form does not send anything to us or to any other service. When you press Send, it opens your email application with your name, address and message filled in, and nothing is sent until you send that email yourself. If you send an email, we receive your address, your message, any attachments and other information you include. Your email provider processes the outgoing message; Google Workspace processes and stores mail sent to our business inbox. Copies may also remain in email applications and in your own mailbox.

We use correspondence to respond, assist with requests, maintain relevant business records and address security or legal issues. Contacting us does not enroll you in a newsletter. Please do not send sensitive personal information or personal information about a child.

You can subscribe by ticking the newsletter box on a printable or footer signup form, or through our signup page hosted by Kit. We ask for your email address so we can send blog updates, free resources and new-book announcements. Signup is intended for adults. Kit sends a confirmation email, and you must confirm before joining the list. Requesting a printable without ticking the box, or contacting us, does not enroll you.

Your email address goes directly from your browser to Kit, which stores the subscription record for us. Kit also processes technical and signup information, which can include your IP address, approximate location, signup source, time, confirmation and consent status, and delivery information. Our Cloudflare website has no subscriber database and receives no name, email address or subscriber ID in the confirmation redirect.

Kit can associate email opens and clicked links with your subscription through tracking pixels and tracked links. These reports help us understand delivery and interest in our emails; recorded opens can be affected by email privacy tools. We have not enabled Kit’s advanced options that append subscriber IDs or hashed email addresses to destination links. Our website analytics is not joined to Kit subscriber profiles.

You can unsubscribe using the link in our emails. Unsubscribing stops marketing messages but can leave a limited record to honor that choice. To request access, correction or deletion, email info@justindesantos.com. We do not automatically add you to other creators’ newsletters.

Cookies, analytics and advertising

We use Cloudflare Web Analytics to understand page visits, referral sources, broad device and regional patterns, and page performance. Reports are available to authorized users of our Cloudflare account. Cloudflare says this analytics service uses no cookies or localStorage and does not fingerprint individual visitors. This is separate from technical information processed to deliver and secure the website.

A Cloudflare script in these pages sends traffic and performance measurements to Cloudflare. Its reports can include visited page paths, referring websites, browser and device categories, country and page-load performance. Cloudflare states that query strings are not logged. We do not use these reports to identify individual readers or connect their browsing to a newsletter profile. See Cloudflare Web Analytics and its reporting and retention details.

This website has no advertising pixel and loads no Kit script. Our own navigation and form code does not set cookies or use localStorage; its only network request is sending a submitted signup form’s email address to Kit. Hosting and network diagnostics still process technical information as described above.

Cookies, when set, are small records stored by your browser and returned with matching website requests. Cloudflare may use security cookies when its protection features apply, such as cookies that record a completed security challenge. They serve security purposes rather than our advertising. No cookies were set in our sampled preview responses on October 21, 2026; this does not guarantee that none will be set during a security challenge.

Cloudflare says its cookie data may be processed in the United States by default. See its security-cookie documentation. A cookie’s expiry is different from the retention of information already processed by a provider.

Our signup forms are part of these pages and contact Kit only when you submit them. On Kit’s own pages, such as its hosted signup page, Kit may use cookies, identifiers and similar technologies for form operation, subscriber recognition, attribution and security. Kit’s email tracking is separate from Cloudflare Web Analytics. See Kit’s privacy notice and subscriber data-processing terms. Your browser and email application provide controls for cookies, stored data and remote images.

We will update this notice before adding optional tracking that changes the practices described here.

Service providers and other disclosures

We use Cloudflare for website delivery, security and analytics, Kit for subscriptions and email updates, and Google Workspace for business email. These providers process information under their applicable terms and data-processing arrangements, and may use service providers of their own. See Cloudflare’s privacy policy and Google’s data-processing terms.

GitHub stores the website’s source code and runs deployment jobs. It is not the host for this website or a subscriber database. AI tools may assist with writing and maintaining public website content. The website code does not automatically send visitor messages or subscriber records to ChatGPT or OpenAI. No Kit AI connector is connected to this account. This describes our configured integrations, not a guarantee about every service provider’s internal processing. Kit lists its own subprocessors, including an AI service provider, in its data-processing terms; that list does not mean every subscriber record is sent to every provider.

We do not sell personal information or share it for cross-context behavioral advertising through this website. We may disclose information when reasonably necessary to comply with law, protect people or legal rights, prevent abuse, or manage a business transfer subject to applicable protections.

External links

Links to book retailers, social networks and other websites take you to services with their own privacy practices. Purchases are completed with the retailer; this website does not collect payment-card details. Review the destination’s privacy notice before providing information.

Retention and security

We retain correspondence for as long as reasonably needed to handle the inquiry and related follow-up, maintain necessary business records, resolve disputes or meet legal obligations. The period depends on the purpose and content of the message. Hosting records and provider backups follow the relevant provider’s retention practices and available account settings; we do not promise immediate deletion from all backups.

We retain newsletter records while you subscribe and as reasonably needed afterward to honor an unsubscribe, document consent, handle requests or meet legal obligations. Kit’s terms provide for return or deletion at the end of service with legal-retention and protected-backup exceptions. A request to delete is distinct from unsubscribing, and we do not promise a fixed purge time for all provider backups.

Cloudflare currently makes Web Analytics reports available for six months. It retains unsampled analytics data for seven days and uses aggregated data for longer periods. These report periods do not describe every hosting or security log.

We use HTTPS and access controls to help protect information. No transmission or storage system can be guaranteed completely secure. Please contact us if you believe information connected with this website has been exposed or misused.

International processing

We operate in the United States. Kit’s published subprocessor list includes hosting and storage in the United States. Our providers may process information in the United States and other countries. Information is not guaranteed to remain in your country. Where applicable law requires safeguards for international transfers, relevant provider agreements and transfer mechanisms apply.

Your choices and rights

You can browse without subscribing or contacting us, and you can get the printables without joining the newsletter. Depending on where you live and the law that applies, you may have rights to access, correct or delete personal information, receive a portable copy, restrict processing, withdraw consent or object to processing. Some rights have exceptions, including when records must be retained by law.

To make a request, email info@justindesantos.com. We may ask for information reasonably necessary to verify your identity and locate the records. You may also have the right to complain to your local data-protection authority.

If European Economic Area or United Kingdom data-protection law applies, Dry Bones Entertainment LLC is the controller for the purposes we determine. We rely on legitimate interests in operating and securing the website and responding to ordinary inquiries, contractual necessity where a request relates to a contract or steps you request before one, and legal obligations where required. We rely on consent for optional newsletter enrollment where required. You can withdraw consent without affecting earlier lawful processing.

Children’s privacy

Our books and activities may appeal to children, but communications with us are intended for adults. This website does not request children’s names, email addresses or other personal details. Children under 13 should ask a parent or guardian to contact us. If you believe a child has provided personal information directly to us, contact info@justindesantos.com so we can investigate and take appropriate steps, including deletion where required.

Changes to this policy

We will revise this policy when our practices change and update the date above. Material changes requiring additional notice or consent will be handled as required by applicable law.