The form takes only what I need to work with you safely: how you'd like to be called, how to reach you, what you're drawn to, what you won't cross, and a small amount of context about your history with this kind of practice. It also captures basic technical metadata — your IP address, your browser's user agent string, the timestamp of your submission. The rest of what you give me persists for as long as our working relationship does.
This site is hosted in Iceland, whose legal framework treats free expression and data protection as foundational rather than optional. The database sits behind credentials only I hold. Submissions are read through an authenticated administrative interface; no part of the public site exposes them, and the form itself has only enough permission to write a new row, never to read an existing one.
My email runs on Proton, which provides end-to-end encryption between Proton accounts and zero-access encryption at rest. When you write to me at an @anamahl.com address, the message lives encrypted on my end.
The honest limit: I do not control your end. If you write to me from a Gmail or work account, your message is encrypted in transit but readable in your inbox by whoever can open it. Think carefully about which email you use, and from which device.
I will never put intimate details into outbound automated email. Confirmations sent by the form are deliberately discreet. They will not give you away.
If you'd like our messaging to be more secure than email allows, I am reachable on Signal. Ask for the number during your screening call, or write to me at info@anamahl.com and I'll provide it. Signal's end-to-end encryption protects what you send better than any email I can offer, and it protects metadata more thoroughly than standard texting.
Verified clients are given a personal identifier that grants access to the returning-client form. This identifier is shared verbally during your screening call, or written on paper if you ask for it. It is never sent by email, never stored alongside your contact information in plain text, and can be revoked or rotated at any time.
I do not sell, share, or trade your information with anyone, ever. No advertising networks, no analytics services, no third-party trackers run on this site. I have no mailing list. I will not add you to one.
If you want your information deleted from my records, ask. I'll do it, and I'll confirm when it's done.
If anything here concerns you, or you'd like more detail before submitting, write to me.
Then begin.