Privacy Policy
This policy explains what personal information saadsheikh.bond (the “Site”) handles, why, who receives it, how long it is kept and what choices you have. It is written to be short, specific and accurate: the Site has no user accounts, no advertising, no analytics and no tracking tools.
At a glance
- The Site sets no cookies and runs no analytics, advertising or tracking scripts.
- The only personal data I receive is what you choose to send through the contact form or a message app.
- I use it only to reply to you. I never sell, rent or trade it, and I send no marketing.
- Contact-form messages are kept for up to 12 months after our last exchange, then deleted.
- You can ask me to access, correct or delete your data at any time.
1. Who is responsible
The Site is a personal portfolio operated by Saad Sheikh, Faridpur, Bangladesh, who decides how and why personal data submitted through the Site is used (the “data controller”). To reach me about privacy, use the Contact page or Telegram (@saadahmad9k).
2. What I collect and why
| Source | Data | Purpose | Basis | Kept |
|---|---|---|---|---|
| Contact form | Name, email address, subject, message (and anything else you type) | To read and reply to your message | Your request and consent; my legitimate interest in answering enquiries | Up to 12 months after our last exchange |
| Direct messages (Telegram, WhatsApp, Facebook, email, phone) | Whatever you send, plus the details that service shows me (such as your username or number) | To reply to you | Your request; legitimate interest | Up to 12 months after our last exchange |
| Web server logs | IP address, browser and device type, pages requested, date and time | Delivering the Site, security and abuse prevention | Legitimate interest in running a secure site | Set by the hosting provider; I do not use logs to profile visitors |
| GitHub box on the home page | Your browser asks GitHub for my public profile data, so GitHub sees your IP address and browser details | Showing my public repository statistics | Legitimate interest | Not kept by me |
Providing this information is voluntary. If you do not use the contact form or message me, I do not receive any personal information from you. I do not knowingly collect sensitive categories of data. Please do not send passwords, ID or bank details, health information or other sensitive data through the form or in messages.
3. Data stored on your device
The Site does not set cookies. It uses your browser’s local storage and cache for the following, none of which identifies you or is sent to me:
| Item | What it holds | Purpose |
|---|---|---|
saad-theme (local storage) | “light” or “dark” | Remembers your theme choice |
saad-gh-cache (local storage) | A copy of my public GitHub profile data, valid for about one hour | Loads the GitHub box faster and avoids needless requests |
| Service worker cache | Copies of the Site’s own pages, styles, scripts, fonts and images | Lets the Site open faster and work offline |
The form on the Contact page sends your message to my Netlify account (Netlify Forms), which forwards it to my email. Netlify may run a spam check on submissions under its own privacy policy.
The items in the table above are strictly functional, so no cookie banner is needed. You can clear them at any time in your browser settings (site data and cache).
4. Who receives data
I share personal data only with the service providers needed to run the Site and to receive your messages, and only as far as necessary:
- Hosting provider (Netlify, privacy policy). It serves the Site, receives and stores contact-form submissions (Netlify Forms) until I delete them, and may keep standard server logs, such as IP addresses and requested pages, under its own policy.
- GitHub (privacy statement) receives a request from your browser when the home page loads the GitHub box (see section 2).
- Messaging and email providers (Telegram, WhatsApp, Facebook, Gmail) handle messages you send through them under their own terms.
I may also disclose information if required by law or to protect the Site and its users against abuse or security threats. Fonts and icons are hosted on the Site itself, so no font or icon provider receives your data.
5. International transfers
I am based in Bangladesh, and the providers above may process data in other countries, including the United States and the European Union. By using the contact form you understand that your message may be processed outside your country. I choose established providers and send them only what is needed, but their safeguards are governed by their own policies.
6. How long I keep data
Contact messages and the related correspondence are kept for up to 12 months after our last exchange, and then deleted from my email, Netlify account and message apps. If you ask me to delete your message sooner, I will do so (see section 8). Server logs follow the hosting provider’s retention rules. Local-storage and cache items stay on your device until you clear them.
7. Security
I take reasonable technical steps to protect the Site and your data, including HTTPS-only delivery with HSTS, a strict Content-Security-Policy, additional browser security headers, no third-party scripts, and a minimal set of providers. No method of transmission or storage is completely secure, so I cannot guarantee absolute security. To report a security problem, see security.txt.
8. Your rights
Depending on where you live (for example under the GDPR or UK GDPR), you may have the right to:
- ask whether I hold your personal data and get a copy;
- have inaccurate data corrected;
- have your data deleted, or its use restricted;
- object to processing based on legitimate interest;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing;
- complain to your local data-protection authority.
This policy is governed by the laws of Bangladesh. Where a data-protection law of your own country applies to you, I will respect the rights it gives you. To use any of these rights, send a request through the Contact page. To protect you, I may ask you to confirm your identity (for example by writing from the same email address you used before). I aim to respond within 30 days.
9. What I do not do
- I do not sell, rent or trade personal data.
- I do not run advertising, analytics or behavior-tracking tools, and I do not build visitor profiles.
- I do not send marketing emails or add you to any mailing list.
- I do not make automated decisions about you.
- I do not use your messages for anything other than replying to you.
10. Children
The Site is not directed at children under 13, and I do not knowingly collect their information. If you believe a child has sent me personal data, contact me and I will delete it. Visitors under 18 should ask a parent or guardian before using the contact form.
11. Links to other sites
The Site links to services such as GitHub, Telegram, WhatsApp and Facebook. Those services have their own privacy practices, and this policy does not cover them.
12. Data incidents
If an incident affecting personal data I hold is likely to harm you, I will notify the people affected where I can, and the authorities where the law requires it.
13. Changes to this policy
If I change how the Site handles data, I will update this page and the dates at the top before the change takes effect. Please check back from time to time.
14. Contact
Questions or requests about privacy: use the Contact page or Telegram (@saadahmad9k). My email address and phone number are listed in the Contact section of the home page.