Privacy Policy.

Last updated: March 1, 2026

This is the personal portfolio website of Ahmad Yasser (ayasser.com). This policy explains what data is collected when you visit, why it is collected, and how it is handled. I keep this short and honest.

What information do I collect?

Information you provide

If you use the contact form, I collect the name, email address, and message you submit. Nothing else is collected unless you choose to send it.

Information collected automatically

When you visit the site, certain data is collected automatically: device type, browser, operating system, approximate location (country and city), pages visited, and how you interact with the site. This includes behavioral data such as clicks, scrolling, and page navigation collected through PostHog. Your IP address is temporarily processed for rate limiting and bot protection but is not stored long-term.

Why do I collect this data?

  • Contact form data — to read and respond to your messages
  • Analytics and behavioral data — to understand how visitors use the site and improve it
  • Rate limiting — to prevent abuse of the contact form
  • Bot detection — to protect the contact form from spam

I do not sell your data to anyone.

Third-party services

This site uses the following services. Each has its own privacy policy that governs how it handles data:

  • PostHog — collects behavioral analytics including clicks, page views, and navigation patterns. Uses first-party cookies for session tracking. Data is stored on PostHog's US Cloud infrastructure.
  • Vercel Analytics — anonymous, cookie-free website analytics. No personal data is collected or stored.
  • Vercel Speed Insights — anonymous performance measurement (page load times, Core Web Vitals). No personal data is collected.
  • Cloudflare Turnstile — bot detection on the contact form. Processes browser signals and IP address to verify you are human. Does not use cookies.
  • Resend — processes contact form submissions for email delivery. Data is encrypted at rest.
  • Upstash — temporarily stores IP addresses for rate limiting. Data is automatically deleted after the rate limit window (60 seconds).

Cookies

PostHog sets a first-party cookie (ph_phc_*) for session tracking and user identification. No third-party cookies are set.

You are asked for consent before analytics cookies are activated. You can also disable cookies in your browser settings at any time.

How long is data kept?

  • Contact form messages — kept in my email inbox until I no longer need them
  • PostHog data — retained according to PostHog's data retention policy
  • Rate limiting records — automatically deleted after 60 seconds
  • Vercel Analytics and Speed Insights — anonymous and aggregated, not tied to any individual

Your rights

You can email me at hey@ayasser.com to request what personal data I hold about you, ask for it to be deleted, or ask for it to be corrected.

If you are in the European Union, you also have the right to withdraw cookie consent at any time (by clearing your browser cookies or local storage), the right to lodge a complaint with your local data protection authority, and the rights to data access, rectification, erasure, and portability under the GDPR. The legal basis for processing is consent for analytics cookies and legitimate interest for responding to contact form messages, rate limiting, and security.

Do Not Track

This site does not respond to Do Not Track browser signals.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new date.

Contact

Questions about this policy? Email me at hey@ayasser.com.

← Back to home