Privacy

The short version

This is a personal portfolio. It has no ads, no tracking across sites and no cookies for visitors. It uses Cloudflare Web Analytics, which is cookieless, does not track visitors across sites or collect personal data, and only counts page views and basic performance. The only personal data I handle is what you choose to send me, by email or through the contact form, plus the ordinary technical records any web server keeps.

Cookies and storage

Visitors are never given a cookie. The one cookie this site can set is a login cookie for the site owner's private admin area, and it is only set after logging in there.

On the Services page, choosing between naira and dollar prices is remembered in your browser's local storage so the choice sticks. It never leaves your device, and you can clear it in your browser settings.

Server logs

Like any website, the server records each request: your IP address, the time, the page asked for and your browser's user-agent. I use this to keep the site running and to spot abuse. These logs are kept for 14 days and then deleted automatically, and are not used to profile or identify visitors. The site sits behind Cloudflare, which also sees these details while delivering the pages, and is hosted on a server in Germany.

Error reports

If something breaks, the site can send a technical error report to Sentry, an error-monitoring service. Reports are scrubbed before they are sent: cookies, login details, request bodies and variable contents are removed, and your IP address is not attached. What remains is the kind of error, where in the code it happened and the page address, without any query string.

Contact form

If you use the contact form, the site stores what you enter (your name, email address, subject and message) and the page you sent it from. Nothing else about you or your device is stored with the message.

Contact form messages are kept for 12 months and then deleted automatically. Deleted messages can remain in encrypted backups for up to about 5 more weeks before they're rotated out.

To keep out spam, the contact page uses Cloudflare Turnstile, a check that tells people apart from automated bots. It loads from Cloudflare on that page only and sees technical details about your browser and connection while it runs.

When you send a message, the site emails it to me and sends you a short confirmation. Both emails go through Resend, an email delivery service, so Resend handles your name, email address and the message I receive. I reply to you by email.

Email

The email links on this site open your own mail app. If you write to me, I receive your email address and whatever you put in the message, and I keep it for as long as it takes to reply and for any work that follows. I don't add you to a mailing list or share your message with anyone. If I delete something at your request, it can remain in encrypted backups for up to about 5 more weeks before those backups are rotated out.

Uploads and embedded content

Visitors can't upload anything. Project images are uploaded by me and served from my own media domain. Some case studies may embed a YouTube video in its privacy-enhanced mode; if so, YouTube will see your visit when that video loads. Fonts and scripts are served from this site, apart from Cloudflare's analytics beacon and, on the contact page only, Cloudflare Turnstile.

Your rights

I'm based in Nigeria and handle personal data in line with the Nigeria Data Protection Act 2023. You can ask what I hold about you, ask me to correct or delete it, or object to how I use it. If you're not happy with my answer, you can complain to the Nigeria Data Protection Commission.

Contact

Questions or requests about any of this: hello@awanicaleb.com. If I change how the site handles data, I'll update this page and its date.