What this site knows about you

The only information this site asks for is what you type into the contact form or the consultation form: your name, your email address, your message, and on the consultation form — optionally — your company, the kind of project, the timeline, the budget band, the days and hours that suit you, and your time zone.

There is no account to create, and nothing beyond a name, an email address and a message is required. Every enquiry is stored in a Postgres database I control, and I am the only person who reads it.

Two things. The first is your browser's user-agent string. The second is a salted SHA-256 hash of your IP address — not the address itself, which this site never stores anywhere. The hash makes “these four enquiries came from the same sender” answerable without the site holding a list of visitors' addresses.

That same hash keys a rate-limit counter, which is what stops the forms being used to send a thousand messages a minute. The counter holds a key, a timestamp and a number. Nothing else is in it, and it expires within the hour.

There is no analytics, no advertising, no tag manager and no third-party tracker anywhere on this site. Nothing here follows you to another site, and no one is told that you visited.

Your theme choice — light, dark or system — is kept in your own browser's storage. It never leaves your device and I cannot read it. The only cookie this site sets is the session cookie on the administration area, which does not exist until someone signs in there.

The site is hosted on Netlify and its data lives in Supabase, which is managed Postgres. When an enquiry arrives the site notifies me through Telegram, and by email through Resend where that is configured. Each of those sees what it needs to do that one job.

Nothing is sold, nothing is shared for anyone else's purposes, and there is no fourth party.

An enquiry is kept while it is still doing something — an open conversation, or a record of what was agreed that either of us might need later. There is no fixed expiry, because inventing one I would not honour is worse than saying this.

If you want yours erased, write to me and say so. I delete the row, which is not the same as archiving it: the record goes, including the message and the hash.

You can ask what I hold about you, ask for a copy of it, ask for a correction, or ask for it to be deleted. One email to the address below is enough — there is no form to fill in and no process to be put through, and I will answer in the language you wrote to me in.

If you would rather I never had the data in the first place, the site works perfectly well without either form: the email address below reaches me directly.

This page lives in the site's source code, so every change to it is a commit with a date and an author on it. If something material changes I will say so here rather than quietly adjusting a sentence.

Write to Mahdii.Support@gmail.com. I read everything myself and usually reply within one business day.