Privacy.

When you access this website, the public delivery infrastructure processes technical request information needed to return the requested page and keep the service secure. This may include the IP address, date and time, requested path, response status, referrer, and browser user agent.

Public proxy security logs are retained for up to 30 days and then deleted. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in reliably and securely providing this website. Hostinger supplies the public delivery and email infrastructure. See the Hostinger privacy policy.

When you use the contact form, the website processes your name, email address, selected project type and budget range, and your message. The information is validated and sent to Mohamad's Hostinger mailbox. A generic receipt is also sent to the email address you provide.

Form contents are not written to a website database or application logs. They are processed transiently for delivery by email. You can alternatively contact Mohamad directly by email.

Processing is based on Article 6(1)(b) GDPR where your inquiry concerns steps before entering into a contract. Article 6(1)(f) GDPR applies to other business correspondence, based on the legitimate interest in responding to relevant inquiries.

Inquiries that do not lead to an engagement are deleted after six months. Where an engagement is established, correspondence and related records are retained for as long as required to perform the contract and meet statutory obligations.

The contact form uses Cloudflare Turnstile to distinguish genuine visitors from automated abuse. When the contact page is used, Cloudflare may process technical signals such as the IP address, TLS fingerprint, user agent, site key, and associated origin. The resulting token is verified before an inquiry is delivered.

The legal basis is Article 6(1)(f) GDPR: the legitimate interest in protecting the contact channel and website against spam and abuse. Cloudflare may process information outside the European Economic Area under the safeguards described in its policies. Details are available in the Turnstile Privacy Addendum.

This website does not use analytics, advertising, or marketing cookies. Turnstile processes strictly necessary technical signals for abuse prevention as described above.

Personal information is disclosed only where necessary to operate the website and respond to inquiries. Relevant service providers are Hostinger for public delivery and email, and Cloudflare for Turnstile. Information may also be disclosed where required by law.

Subject to the applicable legal requirements, you may request access, rectification, erasure, restriction of processing, and data portability. You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Contact mohamad@alkhatib.online to exercise these rights.

You also have the right to lodge a complaint with a supervisory authority. The locally competent authority is:

Links to GitHub and LinkedIn lead to third-party websites. Their operators process information under their own privacy policies when you follow those links.