Privacy policy

Who runs this site

Mustafa Manhal, a freelance designer and frontend developer based in Iraq. I'm the only person who reads what you send. You can reach me about anything on this page at mustafamanhalcs@gmail.com.

What I collect

• From the contact form: your name, your email address and your message.
• Visit statistics: the page you opened, the site that sent you, your country and city, your browser, operating system and device type. They're anonymous. Visits are counted without cookies, using a short-lived code that is deleted after 24 hours and can't be linked to you.
• Page speed measurements: how fast each page loaded, with the page, country, browser and device type. These are anonymous too.
• I don't collect anything else. The site sets no cookies, doesn't use local storage, tracking pixels or fingerprinting, and has no accounts.

Please don't send health details, ID numbers or other sensitive information through the form. This site isn't meant for children, and I don't knowingly collect information from them.

Why I use it

• To reply to your message and, if you ask, to prepare a quote. Replying is a step you asked for, before any agreement exists.
• To see which pages are useful and to keep the site fast. This uses only the anonymous statistics above.

I don't use your information for advertising, profiling or automated decisions, and I don't add you to a mailing list.

Who else handles it

• Resend (United States) delivers contact form messages to my inbox.
• Google (United States) provides that inbox.
• Vercel (United States) hosts the site and produces the anonymous visit and speed statistics.
• WhatsApp and Cal.com, only if you choose to message me or book a call there. Their own privacy policies apply to what you share with them, as do those of GitHub, LinkedIn and Behance if you follow a link.

I don't sell, rent or share your information with anyone else, unless the law requires it.

Where it's stored

I work from Iraq, and the services above store data in the United States. For visitors in the EU, the UK and Switzerland, these providers protect the transfer with Standard Contractual Clauses or the EU-US Data Privacy Framework. Visitors from everywhere else, including Saudi Arabia and the UAE, get the same handling and the same protection.

How long I keep it

• Messages that don't turn into a project: deleted within 12 months of our last contact.
• Messages that turn into a project: kept with that project's records for as long as the work, invoices and legal obligations need them.
• Resend's delivery logs: deleted after 30 days.
• Visit statistics: the daily code is thrown away after 24 hours, and what's left can't identify you.

Your rights

Wherever you live, you can ask me to show you what I hold about you, correct it, delete it, stop using it, or send you a copy. Email mustafamanhalcs@gmail.com and I'll answer within 30 days, free of charge. If I can't do something, I'll tell you why.

If you're in a country with a data protection authority, such as in the EU, the UK, Saudi Arabia or the UAE, you can also complain to it. I'd be grateful for the chance to fix the problem first.

Tracking and Do Not Track

This site doesn't track you across other websites, and it doesn't let anyone else do that through it. So it behaves the same whether or not your browser sends a Do Not Track or Global Privacy Control signal: there is nothing to switch off.

Security

The site and the contact form use HTTPS, and only I can access the inbox and the service accounts. No system is perfectly secure. If something ever goes wrong with your information, I'll tell you, and the authorities where the law requires it.

Changes to this page

If I change how the site handles your information, I'll update this page and its date before the change takes effect. If the change is significant, such as adding a service that collects something new, the page will say what changed.