The short version
Three things are collected: what you type into the contact form, what you type into a testimonial, and anonymous page-view counts. A testimonial's optional email is private and never published. There are no advertising trackers, no profiles of visitors and nothing is ever sold.
Who is responsible
This website is run by Abdul Rehman, a full-stack developer based in Karachi, Pakistan. For anything in this policy — a question, a request or a complaint — write to abdulrehmanafridi88@gmail.com.
What I collect
Only what is needed to reply to you and keep the site running:
- Contact form — your name, your email address, the brief you write, and the time the form was opened. These fields go into a private database and are also emailed to me so the message is not missed.
- Testimonial form — your name, optional role, company and project name, a star rating, the words you write and an optional email address. The quote is stored as pending and only published after approval. Your email is kept private for replies and is never shown on the public site. Your IP address is hashed, never stored raw, and used only to cap submissions at three per hour.
- Anonymous page views — the page you opened, the domain that referred you (for example a search engine, never the full address you came from), and your IP address, which is turned into a one-way hash with a rotating salt and then discarded. The raw address is never stored and the hash cannot be reversed into an address.
- Theme preference — a single value in your browser's local storage remembering whether you chose the light or dark theme.
- Admin session — a secure cookie set only when the site owner signs in to the dashboard. It is never set for ordinary visitors.
There are no advertising cookies, no cross-site tracking, no fingerprinting and no third-party analytics scripts.
How the information is used
- To reply to your brief and, if we work together, to run the project.
- To review and publish testimonials, and to keep spam out of both forms.
- To see which pages are useful and which are not, using counts only.
- To meet legal or accounting obligations when they apply.
Your brief is never added to a mailing list and you will not receive marketing email from this site.
Why processing is allowed
Where data-protection law such as the GDPR applies, the bases are: your consent when you submit the contact form; legitimate interests in keeping the site secure and understanding which pages are read; and legal obligation for records that must be kept. You can withdraw consent at any time by asking me to delete your message.
Who else sees it
A small number of service providers process data on my behalf, and only as far as needed:
- Hosting and delivery — the platform that serves this website.
- Database — MongoDB Atlas, where briefs and page-view counts are stored.
- Email delivery — the mail provider used to send a submitted brief to my inbox.
- Bot protection — Cloudflare Turnstile, only when it is switched on for the contact form.
None of these providers is allowed to use your data for their own marketing, and your data is never sold or rented. It may be disclosed if the law requires it.
How long it is kept
- Contact messages are kept while we are in touch and for up to 24 months afterwards, so an old project can be picked up again. Ask and they are deleted sooner.
- Testimonials stay published until you ask for them to be removed. The private email attached to one is deleted as soon as it is no longer needed, or on request.
- Page-view counts are kept in aggregate form and older rows are pruned; they contain no name, email or raw address.
- The theme preference stays in your browser until you clear your storage.
Your rights
Depending on where you live, you may ask to see the personal data held about you, have it corrected, have it deleted, restrict or object to its use, or receive a copy in a portable format. You may also withdraw consent at any time.
Send any request to abdulrehmanafridi88@gmail.com and it will be answered within 30 days. If you are not satisfied, you have the right to complain to your local data-protection authority.
Security
The site is served over HTTPS, the database is password-protected and reachable only from the server, and IP addresses are hashed before they are written. No system is perfectly secure, so please do not send passwords, card numbers or identity documents through the contact form.
Children
This site is meant for people arranging professional work and is not directed at children under 16. Please do not submit personal data on behalf of a child.
Processing outside your country
The hosting, database and email providers may store data in countries other than Pakistan. Where required, transfers rely on the providers' standard contractual safeguards.
Changes to this policy
The date at the top of this page shows when the text last changed. If a change materially affects how your data is handled, it will be noted on this page before it takes effect.
Contact
Questions about privacy, or a request to access or delete your data: abdulrehmanafridi88@gmail.com. The rules for using this website are set out in the terms and conditions.
Still have a question?
Tell me what you are building — I reply within a day.