$ cat privacy_policy.md

# legal / how your data is handled

> Privacy Policy

// last updated: September 3, 2026

This is a personal portfolio site. It is intentionally minimal and collects as little about you as possible. This page explains exactly what happens with the small amount of data the site does touch — through the contact form, the AI chat widget, and analytics.

What gets collected

  • Contact form: when you submit the form, your name, email address, and message are sent to my own backend service so I can read and reply to your message. Nothing else is attached to it.
  • AI chat widget: if you switch the chat widget into AI mode and type a free-text question, that question text is sent to that same backend service, which runs it against a knowledge base built from this site's public content and returns an answer. Your question and your IP address are processed there for rate-limiting (a few requests per minute per IP). The built-in slash commands (/about, /skills, …) run entirely in your browser and send nothing.
  • Analytics: the site loads Google Firebase Analytics (measurement ID G-CSDSPWMJ10), which records aggregate usage — pages/sections viewed, time on page, approximate location, device and browser type, and referral source. If your browser sends a Do Not Track signal, analytics collection is switched off automatically.
  • Server logs: the hosting provider (GitHub Pages) and the contact/chat API may keep standard request logs, including IP address and user agent, for security and abuse prevention.

What it's used for

  • Replying to messages you send me through the contact form.
  • Answering questions you ask the AI chat widget.
  • Understanding, in aggregate, which parts of the site people find useful.
  • Keeping the contact form and chat endpoint from being abused (rate limiting, spam filtering).

Your information is never sold, rented, or used for advertising.

Third-party services

The site relies on these external services:

  • GitHub Pages — static hosting for this site. See GitHub's Privacy Statement.
  • Google Firebase / Google Analytics — usage analytics. See Google's Privacy Policy.
  • Google Fonts — the JetBrains Mono and Inter typefaces are loaded from Google's font CDN, which receives your IP address as part of that request. See Google's Privacy Policy.
  • jsDelivr CDN — some skill icons are served from cdn.jsdelivr.net.
  • My backend API — a private backend service I operate myself, which handles contact-form submissions and AI chat questions. It is not shared with anyone else.

Cookies & local storage

The site itself does not set any first-party tracking cookies. Your theme preference (dark / light) is saved in your browser's localStorage under the key site-theme and never leaves your device. Google Firebase Analytics may set its own cookies / storage entries to measure usage — you can block these in your browser settings without breaking the site.

Data retention

Contact-form messages are kept in my email / API records only as long as needed to handle your enquiry and any follow-up. Analytics data is retained according to Google's default retention settings. You can ask me to delete anything you've sent at any time.

Your rights

  • Ask what personal data of yours I hold.
  • Ask me to correct or delete it.
  • Withdraw consent for analytics (use Do Not Track, or a content blocker).
  • Complain to your local data protection authority.

External links

This site links out to GitHub, LinkedIn, Facebook, app stores, and blog articles. I'm not responsible for the privacy practices of those sites — check their own policies.

Children

This site isn't directed at children under 13, and I don't knowingly collect their personal information.

Changes

If this policy changes, the "last updated" date above changes with it. Material changes will be reflected here before they take effect.

Contact

Questions about this policy, or want something deleted? Email kawsermiah.cse@gmail.com.

← cd ~/home