Updated
Privacy
This is a personal site. It collects as little as it can, keeps it here, and never sells or shares it for advertising.
Visit counts
The site counts its own traffic; there are no third-party trackers or ad scripts. Counting uses no cookies. Each day a new random salt is created, and a visit is recognised by a one-way hash of that salt with your IP address, browser and the site address. Your IP address itself is never stored. The salts and hashes are deleted after about two days, so a visitor can't be followed from one day to the next.
What remains is daily totals (visitors, visits, views), views per page, and a log of recent visits: the page, the referring site's domain, the country, and a coarse browser, operating system and device type. That log is deleted after 30 days. Some of these numbers appear on the public dashboard.
Guestbook sign-in
To sign the guestbook you sign in with GitHub or Google. The site then stores the name, email address and profile picture that provider shares, plus a session cookie so you stay signed in. Your name, picture and message are shown publicly with your note; your email address never is. Expired sessions are deleted every night.
Claps and preferences
Blog posts set one cookie, sr_vid: a random, signed ID that only remembers how many times you clapped for each post (it lasts a year and holds nothing else). Your theme, motion and sound choices are saved in your own browser's storage and never sent here.
Contact messages
The contact form stores what you type (name, email, message and the optional topic and mood) so I can reply, and emails a copy to my inbox. It also keeps a one-way hash of your IP address to slow down spam. Messages stay until I delete them.
Where it lives
The site runs on Vercel, and its database and media live on Supabase. Contact emails are sent through Resend. Nothing is sold, and nothing is shared with anyone else.
Deleting your data
Email hello@shujaurrahman.com and I'll delete your guestbook account and notes, your messages, or anything else tied to you, and confirm when it's done. You can also ask what is stored about you.