PortfolioPrivacy

Privacy

Last updated · 15 May 2026

A plain-language summary of exactly what this site collects, who processes that data, and how to opt out. No analytics script loads on rupam.uk until you explicitly accept via the cookie banner — decline (or dismiss without choosing) and nothing is sent.

01

The default — no tracking

On your first visit, the site loads without any third-party analytics. A small dialog appears at the bottom of the screen offering two equally-weighted choices: Accept or Decline. The dialog is non-blocking; if you dismiss it without choosing, the site treats that the same as Decline.

Your choice is stored locally in your browser under the key consent.v1. It never leaves your device. You can change it any time using the Manage cookies button in the footer.

02

Google Analytics 4

Property G-D7FPH56PSH · loads only after consent

When you accept, Google Analytics 4 starts collecting standard web-analytics signals. Specifically:

  • The page URL, page title and referring URL for each navigation
  • Session timing — start time, duration, engagement
  • Device class (mobile / tablet / desktop), browser, operating system, screen resolution, language
  • Approximate location (country, region, sometimes city) derived from your IP, after which Google truncates the IP
  • A pseudonymous client identifier stored in a first-party _ga cookie

What does not get sent to Google: your name, email, phone, or anything you type into the contact form. No user-identifying field is forwarded. IP-anonymisation is on at the property level.

Event-level data is retained by Google for 14 months on this property, after which it's automatically deleted. You can opt out at any time via the cookie banner, by installing Google's official browser opt-out add-on, or by enabling Do Not Track / tracker-blocking in your browser.

03

Microsoft Clarity

Project wr3w27bmim · loads only after consent

Clarity records anonymised interaction signals to help me understand how the site is being used. After consent, it captures:

  • Session recordings: cursor movement, clicks, scroll behaviour
  • Aggregated heatmaps showing where visitors click and how far they scroll
  • Page URLs and titles
  • Device, browser and operating-system metadata
  • Approximate geolocation (country / region level)

Clarity automatically masks sensitive content before it leaves your browser. All <input> values, password fields, payment fields and any element marked with the data-clarity-mask attribute are replaced with placeholder dots in recordings.

What does not get sent to Microsoft: your name, email, the contents of the contact form, or any other personally-identifiable input.

Microsoft retains Clarity session data for up to one year per their service terms. You can opt out by declining cookies on this site, or by enabling tracker-blocking in your browser.

04

Contact form submissions

Web3Forms relay

When you submit the inquiry form on the homepage, the data is relayed by Web3Forms (a third-party submission relay) to omar@i-vas.net. The fields sent are exactly what you typed:

  • Full name
  • Organisation
  • Work email (free webmail addresses are rejected client-side)
  • Inquiry type
  • Message body
  • Submission local time and IANA timezone (e.g. Asia/Dhaka)
  • Your public IP address and two-letter country code — fetched from Cloudflare's /cdn-cgi/trace endpoint on the same origin (no third-party request). Used for spam and abuse prevention and shown back to you in the inquiry console panel before you submit, so you know exactly what will be sent.

Web3Forms holds the submission only long enough to deliver it, and may keep brief request logs for spam and abuse prevention. This is the only path on the site where you actively transmit personal data — the cookie banner does not affect this; if you submit the form, you've consented to that specific submission.

05

Hosting

Cloudflare Pages / Workers

The site is hosted on Cloudflare's global edge network. As the HTTP layer, Cloudflare necessarily sees standard request metadata for every visitor: source IP, user-agent string, requested path, referrer and timing. Cloudflare may retain abbreviated request logs for security, performance and abuse prevention. No application code on the site reads or stores this data.

06

Cookies and local storage

The following items may exist in your browser for this domain:

NameTypePurposeSet by
consent.v1localStorageYour cookie-banner choiceThis site
themelocalStorageLight / dark preferenceThis site
_ga, _ga_*CookieGA client identifierGoogle Analytics (after consent)
_clck, _clskCookieClarity session identifierMicrosoft Clarity (after consent)

Nothing else is set. If you decline the cookie banner, only consent.v1 and theme are written — both first-party, neither used for tracking.

07

Your rights, and how to exercise them

Under GDPR, UK GDPR and similar privacy frameworks, you have the right to access, correct, delete or port any personal data held about you, and to withdraw consent for tracking at any time.

  • Withdraw consent: click Manage cookies at the bottom of any page on this site. Choosing Decline removes GA and Clarity cookies on the next page load.
  • Access, correction, deletion: email omar@i-vas.net. Because the site doesn't operate a user account system, the only data tied to you personally is what you submitted via the contact form — that's what such a request would cover.
  • Browser-level blocking: Brave, Firefox (strict mode), Safari (intelligent tracking prevention) and uBlock Origin all block GA and Clarity by default without any action on your part.
08

Privacy contact

For any privacy-related question — including access, correction or deletion requests — write to omar@i-vas.net. Please include enough context for me to locate any relevant submission (a name, organisation or rough submission date is usually enough).

End of disclosure

© 2026 · Syed Omar Ibn Feroj