INITIALIZING

Privacy Policy

Last updated: May 2026

1. Overview

This website is a personal portfolio operated by Mohamed Maa Albared. Your privacy is important. This policy explains what data is collected, how it's used, and your rights.

2. Data Collected

2.1 Analytics (Automatic)

When you visit this site, the following is recorded for analytics purposes:

  • Page visited — the URL path you accessed.
  • Referrer — the page that linked you here (if any).
  • User agent — your browser and OS type.
  • Country/language — inferred from your browser's Accept-Language header.
  • IP address hash — your IP is immediately hashed (HMAC-SHA256) with a secret salt. The raw IP address is never stored.

2.2 Contact Form (Voluntary)

If you submit the contact form, the following is stored:

  • Your name, email address, subject, and message.

This data is used solely to respond to your inquiry.

3. Cookies

This site uses a session cookie for admin authentication only. No tracking cookies, advertising cookies, or third-party analytics cookies are used. A localStorage key is used to remember your theme preference (dark/light mode).

4. Third-Party Services

This site loads resources from the following CDNs:

  • Google Fonts (fonts.googleapis.com) — for web fonts.
  • Cloudflare CDN (cdnjs.cloudflare.com) — for GSAP animation library.
  • jsDelivr (cdn.jsdelivr.net) — for Chart.js (admin only).

These services may receive your IP address as part of the HTTP request. Refer to their respective privacy policies for details.

5. Data Retention

  • Page visit analytics are retained for up to 90 days, then automatically purged.
  • Contact messages are retained until manually deleted by the site administrator.

6. Your Rights

You may request deletion of any personal data by contacting me through the contact form. Since IP addresses are only stored as irreversible hashes, they cannot be linked back to you.

7. Data Security

All communication is encrypted via HTTPS. Security headers (CSP, HSTS, X-Frame-Options, etc.) are enforced. Input is sanitised to prevent XSS and injection attacks. Subresource Integrity (SRI) is used for all CDN scripts.

8. Contact

For privacy-related inquiries, please use the contact form.