Privacy Policy

Your privacy matters. This policy explains what information is collected when you visit this site, how it is used, and your rights regarding that information.

1. Who I Am

This website is operated by Irfan Habeeb, a personal portfolio and blog. If you have any questions about this policy, you can reach me through the contact form.

2. Information I Collect

Information you provide

• Contact form submissions — your name, email address, and message when you reach out through the Studio page.
• Google Sign-In — if you choose to sign in, I receive your name, email address, and profile picture from Google. This is used solely to identify you as a member or returning visitor.

Information collected automatically

• Visitor cookie — a random anonymous ID stored in a cookie (_vid) to remember your likes on Notebook posts. This contains no personal information.
• Session data — a short-lived session cookie used to keep you signed in. It expires when you sign out or after an extended period of inactivity.
• Server logs — standard web server logs may record your IP address, browser type, and pages visited. These are used only for debugging and are not shared.

3. How I Use Your Information

• To respond to your contact form messages.
• To identify you as a signed-in member and grant access to members-only content.
• To remember which Notebook posts you have liked (using the anonymous visitor cookie).
• To improve the site based on general usage patterns.

I do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Google Sign-In

If you sign in with Google, your authentication is handled by Google's OAuth 2.0 service. I only store your name, email address, and profile picture URL as provided by Google. You can revoke access at any time through your Google Account settings.

5. Cookies

This site uses the following cookies:

• _vid — an anonymous visitor ID for tracking likes. Persists for 5 years. Contains no personal data.
• Session cookie — keeps you signed in. Deleted when you sign out.
• Theme preference — stores your light/dark mode choice in localStorage, not a cookie.

No third-party advertising or tracking cookies are used on this site.

6. Data Storage

Data is stored on secure servers. Contact form messages and user accounts are stored in a PostgreSQL database hosted on Railway. Uploaded media files are stored on a persistent volume.

7. Your Rights

You have the right to:

• Request access to the personal data I hold about you.
• Request correction or deletion of your personal data.
• Withdraw consent at any time (e.g. by signing out and requesting account deletion).

To exercise any of these rights, please contact me through the Studio page.

8. Third-Party Services

This site uses the following third-party services:

• Google Fonts — to load typefaces. Google may log font requests.
• Google OAuth — for sign-in functionality.
• Railway — hosting infrastructure.

9. Children's Privacy

This site is not directed at children under the age of 13. I do not knowingly collect personal information from children.

10. Changes to This Policy

I may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of the site after changes constitutes acceptance of the updated policy.