Skip to content
M. Talha Farooqi
Privacy

How this site handles your data — and how little of it there is.

A plain-language record of the data this site uses for analytics, preferences, contact, newsletter delivery, and abuse prevention.

The short version

This site is a personal portfolio. It does not sell data, run advertising, or build visitor profiles.

Public pages are rendered from this site's own database. No third-party provider is contacted while you read a page.

What is measured

Vercel Web Analytics records aggregate page views, and Vercel Speed Insights samples field performance measurements. These services do not use analytics cookies or identify individual visitors.

When PostHog is configured, this site records a small, documented set of anonymous actions such as completing an article, opening a project, or submitting a form. Autocapture, session recording, form contents, names, email addresses, and message text are disabled or never sent.

Sentry receives sampled performance traces and errors after request bodies, cookies, query strings, user identity, and sensitive fields have been removed.

Standard server request logs may briefly record technical details such as the requested path and a user agent, for reliability and abuse prevention.

What is stored on your device

Your appearance choice (system, light, or dark) and whether interface sounds are enabled are stored in your browser's local storage.

If anonymous PostHog analytics is enabled, its randomly generated visitor identifier is also kept in local storage so meaningful events in one browser are not double-counted as different visitors.

Authentication cookies are set only inside the private studio area, and only after a successful sign-in.

When you get in touch

If you use the contact form, I store the details you submit, the message, its pipeline activity, and a keyed hash used for abuse prevention. The site does not store your raw IP address or raw user agent with the enquiry.

Contact details are used to reply and follow up on the request. Submitting the form does not add you to a mailing list.

You can ask for any message you sent to be deleted, and it will be.

Newsletter

Newsletter subscriptions use double opt-in. The database stores your email address, optional first name, topic choices, consent timestamp, subscription status, and hashed confirmation and unsubscribe tokens.

Resend delivers transactional newsletter messages and reports delivery, bounce, and complaint events. You can unsubscribe from any newsletter message without creating an account.

External services

Cloudflare Turnstile checks public forms for automated abuse. An embedded Calendly calendar is loaded only on the booking page when scheduling is configured.

Some pages link to external services such as GitHub, Resend, or Calendly. Their own privacy terms apply when those services handle a request.