Privacy Policy

Your privacy matters. This policy explains what information is collected when you visit this site, how it is used, and your rights regarding that information.

1. Who I Am

This website is operated by Irfan Habeeb, a personal portfolio and blog. If you have any questions about this policy, you can reach me through the contact page.

2. Information I Collect

Information you provide

• Mailing list (Google) — if you join my mailing list by continuing with Google, I receive your name, email address, and profile picture from Google. I use your email address to tell you about new work, and to recognise you when you come back.
• Contact forms — the contact page links to four forms: Contact Form, Product Related, Copyright, and Data Retention. They are hosted on Google Forms, so what you enter there is collected by Google Forms and sent to me. See Google's privacy policy. This website does not have a contact form of its own and does not store those responses.
• Membership (Patreon) — memberships and subscriptions are handled on Patreon. The Subscribe page links to my Patreon page, and anything you do there is handled by Patreon under its own privacy policy. Following that link does not sign you in to this website.

Information collected automatically

• Session cookie — keeps you signed in for up to 30 days. Deleted when you sign out or when the session expires.
• Server logs — standard web server logs may record your IP address, browser type, and pages visited. These are used only for debugging and are not shared.
• Analytics — this site uses Google Analytics to understand general visitor behaviour such as page views and session duration. No personally identifiable information is sent to Google Analytics.
• Comment widget: Blog, Verse, and Book pages include an optional comment section powered by Disqus. The widget only loads after you choose to open comments on a page, and once it loads it may collect your IP address, browser information, and anything you choose to post. See the Comments section below for full details.

3. How I Use Your Information

• To tell you about new work, if you have joined the mailing list with Google.
• To respond to what you send through the contact forms.
• To identify you as a signed-in member and grant access to members-only content.
• To understand how people use the site through aggregated analytics data.

I do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Google Sign-In

If you continue with Google, your authentication is handled by Google's OAuth 2.0 service. I only store your name, email address, and profile picture URL as provided by Google. You can revoke access at any time through your Google Account settings.

5. Cookies

This site uses the following cookies:

• Session cookie — keeps you signed in for up to 30 days. Deleted when you sign out.
• Theme preference — stores your light/dark mode choice in localStorage, not a cookie.

Aside from the Disqus comment widget described in the Comments section below, no third party advertising cookies are used on this site.

6. Data Storage and Retention

Data is stored on secure servers. User accounts are stored in a secured database. Uploaded media files are stored on a dedicated volume. How long each kind of data is kept:

• Account details (name, email address, profile picture URL) — kept while your account exists, until you ask me to remove them.
• Sign-in sessions — expire after 30 days, or when you sign out.
• Form responses — held in Google Forms, and kept only as long as I need them to deal with your message.
• Server logs — kept for a limited time by my hosting provider, and used only for debugging.
• Analytics and comments — kept by Google Analytics and Disqus under their own settings and policies.

To ask how long your data is kept, or to have it removed, use the Data Retention form on the contact page.

7. Your Rights

You have the right to:

• Request access to the personal data I hold about you.
• Request correction or deletion of your personal data.
• Leave the mailing list at any time by asking me to remove your account and email address.

To exercise any of these rights, use the Data Retention form on the contact page.

8. Third-Party Services

This site uses the following third-party services:

• Google Fonts — to load typefaces. Google may log font requests.
• Google OAuth — for sign-in functionality.
• Google Forms — hosts the contact forms linked from the contact page.
• Patreon — the Subscribe page and footer link to my Patreon page. Following those links takes you to Patreon.
• Google Analytics — to understand general site usage. Data is anonymised and aggregated.
• Disqus — powers the optional comment sections on Blog, Verse, and Book pages. It only loads once you choose to open comments on a page.

9. Comments

Comments on Blog, Verse, and Book pages are powered by Disqus, a separate company that is not operated by me. Comments are not loaded automatically. They only appear after you click the button to open comments on a page, so nothing is sent to Disqus until you take that action.

Once loaded, Disqus may collect information such as your IP address, browser and device details, and any content you choose to post. If you sign in to Disqus or post as a guest, the name, email address, or social account you provide becomes part of your public comment and is stored by Disqus, not by this website. Disqus may also set its own cookies to remember your login, measure usage of the widget, and in some cases personalize advertising shown within the comment section.

I do not control how Disqus collects or uses this data. You can review Disqus's own privacy policy at disqus.com/privacy-policy for full details. If you would like a comment removed, you can delete it through your Disqus account, or contact me through the contact page and I will request its removal.

10. Children's Privacy

This site is not directed at children under the age of 13. I do not knowingly collect personal information from children.

11. Changes to This Policy

I may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of the site after changes constitutes acceptance of the updated policy.