Privacy
What I collect, and what I don't.
This site sets no cookies and runs no advertising trackers. During an engagement I look at your AWS configuration and your bill, not your customers' data.
Last updated 17 September 2026.
Who this is
Roth Cloud Consulting LLC
A California limited liability company based in Santa Cruz. Tom Roth is the sole owner and the only person who handles any of this.
If you only visit the site
Cookieless, and deliberately incurious.
Analytics are handled by Cloudflare Web Analytics, which sets no cookies. It records page views, referring site, country, browser, and device type. It does not fingerprint you, build a profile, or follow you to other sites. I can see that eleven people from California read this page. I cannot see which eleven.
The site is served through Cloudflare, which processes your IP address to deliver the page and block attacks. That's a technical necessity, not a choice I made about you.
Typefaces load from Google Fonts, which means Google receives your IP address when the fonts are fetched. If that matters to you, it can be removed by self-hosting them; say so and I'll do it.
No cookies are set by this site. No advertising pixels, no Meta pixel, no LinkedIn Insight tag, no session recording, no heatmaps.
If you get in touch
Used for one thing: talking to you about the work.
Booking a call goes through Google Calendar's appointment scheduling, which collects your name, email address, and anything you type into the booking form. Emailing me collects whatever is in your email. Both live in Google Workspace under my control.
I don't run a newsletter, won't add you to a mailing list, and don't use automated follow-up sequences. If we speak once and nothing comes of it, you won't hear from me again unless you write first.
I don't sell, rent, or share contact information. There's nobody to share it with. This is one person in Santa Cruz.
If you become a client
The part that actually matters.
- Read-only to start. A scoped IAM role that you create, giving read access plus billing and nothing more. Never keys pasted into email or Slack.
- Configuration and cost, not content. I look at how the account is built and what it costs: resource inventory, IAM policies, network configuration, logging, billing. I don't need your application data, customer records, or production databases, and I don't go looking.
- Where it lives. Notes, findings, and the written assessment sit in my Google Workspace and on my own machine, both with disk encryption and multi-factor authentication.
- What I keep afterwards. The assessment and my working notes, so I can answer questions later. Nothing operational: no credentials, no exported account data.
- Access ends when the work does. I'll tell you exactly which role and credentials to revoke, and you should hold me to it.
- On request, sooner. Ask me to delete engagement material and I will, subject to anything I have to keep for tax or legal reasons.
If your own policies require specific handling, an NDA, or a data processing agreement, send them over. I'd rather work under your paperwork than argue about mine.
Sub-processors
Three, and that's the whole list.
- 01
Cloudflare
Serves this site and provides cookieless analytics.
- 02
Google Workspace
Email, calendar, and documents.
- 03
Amazon Web Services
Your own account, which you control and I access under your grant.
If that changes, this page changes.
California rights
CCPA and CPRA.
California residents can ask what personal information I hold about them, ask for a copy, ask me to correct it, and ask me to delete it. Email me and I'll handle it. There's no portal and no form, because there's no volume that would justify one.
I have never sold or shared personal information for cross-context behavioural advertising, and I don't intend to start. There's no opt-out link on this page because there is nothing to opt out of.
Changes and contact
Questions about any of this?
If this policy changes materially I'll update the date at the top. Requests under the section above, or anything else, go to tom at rothcloudconsulting dot com.