//privacy

Privacy Policy

Last updated: May 31, 2026

This is my personal portfolio site. I keep data collection to the minimum needed to let you reach me and to keep the site free of spam and abuse. This policy explains what is collected, why, and what happens to it.

##Information I collect

Contact form. When you send a message, I collect the name, email address, subject, and message you provide. You choose what to share, so please don't include sensitive personal information in a message.

Technical data. When the form is submitted, my backend records the request's IP address. It is used only to rate-limit submissions and prevent abuse.

Spam protection signals. The site uses Cloudflare Turnstile (see below), which processes some technical and behavioural signals to confirm you are a human and not a bot.

##Spam protection (Cloudflare Turnstile)

To protect the contact form from spam and automated abuse, this site uses Cloudflare Turnstile in its invisible mode. Turnstile verifies visitors silently in the background, with no visual challenge or interaction required from you. To do this, Cloudflare may collect device and behavioural data and may set or read cookies or local storage in your browser.

As a condition of enabling invisible mode, this policy references Cloudflare's Turnstile Privacy Addendum, which governs how Cloudflare processes that data.

https://www.cloudflare.com/en-gb/turnstile-privacy-policy/

##How I use your information

I use the information you submit to:

  • read and respond to your message;
  • rate-limit submissions and prevent spam or abuse; and
  • keep the site and its contact endpoint secure.

I do not use your information for advertising, and I do not sell it.

##Where your data lives

This site runs on infrastructure I control. Appwrite is self-hosted on my own server, so the message you send is stored there, in my database. It is not handed to a third-party backend service and it is not emailed to any external inbox. The only outside service involved is Cloudflare, and only for Turnstile's bot check, which never receives your message. I do not sell or rent your data to anyone.

##Data retention

I keep contact messages for as long as needed to follow up, then delete them. You can ask me to delete yours at any time.

##Your choices and rights

You can request a copy of, a correction to, or deletion of any personal data you have sent me by emailing kmrejowan@gmail.com. If you would rather not use Turnstile, you can always reach me directly at that address instead of using the form.

##Cookies

This site does not set its own tracking or advertising cookies. Cloudflare Turnstile may use cookies or local storage strictly to perform its bot-detection function, as described in its addendum above.

##Changes to this policy

I may update this policy as the site changes. The "last updated" date at the top reflects the latest version.

##Contact

Questions about this policy? Email kmrejowan@gmail.com.