Effective and last updated

Privacy notice

This site doesn't collect personal data about you. There's no analytics, no cookie, no form, no account, no advertising and no third-party script, and nothing is stored in your browser. Some data still has to move for a page to reach you at all, so this notice sets out what that is, who handles it, and what you can ask of me.

Who's responsible

This site, hursh-javeri.pages.dev, is run by me, Hursh Javeri, an individual based in Dubai, United Arab Emirates. I decide how data connected to the site is handled, which makes me its controller under data protection law. You can write to me about anything in this notice at hurshm05@gmail.com.

What this site doesn't do

  • It sets no cookies.
  • It writes nothing to your browser's storage. The games on the work plates keep their scores in memory, so reloading the page clears them.
  • It runs no analytics, tracking pixels, fingerprinting, session recording or advertising.
  • It loads nothing from anyone else. The fonts, the 3D graphics code and every script come from this site's own address, and its Content Security Policy tells your browser not to run code from, or let the page connect to, any other address.
  • It has no forms, sign-ups, accounts or comment boxes.
  • It makes no automated decisions about you and builds no profile of you.
  • It never sells or rents data about you, or shares it for advertising.

What does get processed, and why

Delivering the page

The site is hosted on Cloudflare Pages. To send you a page, Cloudflare's network has to receive your request, and every request carries your IP address, the address of the page you asked for, the time, and the details your browser sends by itself: its make and version, your preferred languages and, where there is one, the page that linked you here. Cloudflare uses this to deliver the site and to protect the site and its own network from attacks and abuse.

I haven't switched on analytics or stored request logs for this site, and I keep no record of who visits. Cloudflare may keep limited records of its own, for example for security, as its privacy policy describes.

Why: to show you the page you asked for and to keep the site secure. Where the EU or UK GDPR applies, the legal basis is legitimate interests (Article 6(1)(f)), mine and Cloudflare's, in delivering a website that works and is secure.

Network error reports

Cloudflare also tells browsers that support Network Error Logging, which today means Chrome, Edge and other browsers built on Chromium, where to report a failed connection. If your browser can't reach this site because of a network problem, such as a DNS, connection or certificate error, it may later send Cloudflare a short report about the failure: the address that failed, the kind of error, how long the attempt took, the protocol, the server's IP address, the referring page and your browser's user agent. This site's setting reports failures only, never successful visits.

Cloudflare says it holds your IP address only for as long as it takes to receive a report, and doesn't log it. I don't receive these reports.

Why: to find and fix network faults. Where the EU or UK GDPR applies, the legal basis is legitimate interests (Article 6(1)(f)) in keeping the site reachable.

GitHub figures

The work plates can show a public repository's star count and the date of its latest change. Those figures are fetched from GitHub when the site is built and published, not when you visit, so your visit never causes a request to GitHub.

If you email me

If you write to hurshm05@gmail.com, I receive your email address, the name your email account shows, your message and any attachments, and the technical headers every email carries. I use them to read and answer your message and to carry on the conversation, for example about a role or a project. I don't add anyone to a mailing list, and I don't share your message with anyone unless you ask me to or the law requires it.

My email is provided by Google through Gmail, so Google stores and processes your message under its privacy policy.

Why: to reply to you. Where the EU or UK GDPR applies, the legal basis is legitimate interests (Article 6(1)(f)) in answering people who write to me or, when you write about a role or a contract, steps taken at your request before entering into one (Article 6(1)(b)). You don't have to email me, and nothing on the site depends on it.

Links to GitHub, LinkedIn and Credly take you to sites run by other companies. When you follow one, your browser tells that site only that you came from https://hursh-javeri.pages.dev, never which page, because this site sets a strict referrer policy. What those sites do is governed by their own policies: GitHub, LinkedIn and Credly.

The CV and certificate files are served by this site like any other page. The Copy address button puts my email address on your clipboard and reads nothing from it.

Cookies

This site doesn't set cookies. In rare cases, such as when its network is under attack, Cloudflare's security systems can ask a browser to pass a check before a page loads. If that ever happens to you, Cloudflare may set a strictly necessary security cookie, such as cf_clearance, so that it doesn't have to ask again. That cookie is used only for the check.

Who receives data

  • Cloudflare, Inc. hosts, delivers and protects the site. It processes request data on my behalf under its data processing terms, and for some purposes of its own, such as securing its network, under its own privacy policy.
  • Google provides my email, and receives anything you send me.

Nobody else receives data about you through this site, unless the law requires it.

Transfers to other countries

Cloudflare answers each request from a data centre close to you, which may be in a different country from the one you're in. Cloudflare, Inc. is based in the United States, and Google stores email in the United States and elsewhere. Both rely on recognised safeguards for international transfers, including standard contractual clauses and certification under the EU–US Data Privacy Framework, its UK Extension and the Swiss–US Data Privacy Framework. Data leaves your country only as far as it has to for Cloudflare to deliver the page you asked for, or for your email to reach me.

How long data is kept

  • I keep no request logs, analytics or visitor records, so there's nothing about your visit for me to delete.
  • Game scores last until you reload or leave the page.
  • Cloudflare keeps its own security and network records for the periods its privacy policy describes, and drops the IP address behind a network error report once the report has been received.
  • Email stays in my inbox while the conversation it belongs to is still useful to either of us, including anything that follows from it, such as a job application. I delete it when you ask, unless I need to keep something to establish or defend a legal claim.

Your rights

Depending on where you live, data protection law gives you the right to ask whether I hold personal data about you and to get a copy of it, to have it corrected or deleted, to restrict or object to how it's used, to receive it in a portable form, to withdraw consent wherever I rely on it, and not to be subject to a decision based solely on automated processing, which this site never makes.

Because I keep no visitor records, the only personal data I'm likely to hold about you is email you've sent me. To use any of these rights, email me. It's free, I'll answer within one month, and I may ask for just enough information to confirm the request comes from you.

If something goes wrong

If a security breach ever affected personal data I hold, I'd tell the people affected, and any authority the law requires me to notify, without delay.

Complaints

If you think I've mishandled your data, please tell me first so I can put it right. You can also complain to a data protection authority:

Children

This site is for recruiters, engineers and anyone curious about my work. It isn't aimed at children and doesn't ask anyone for personal data. If you're under 13, or under the age at which you can agree to this yourself where you live, please ask a parent or guardian before you email me. If you think a child has sent me personal data, tell me and I'll delete it.

Do Not Track and Global Privacy Control

This site treats every visitor as though they'd asked not to be tracked, because it doesn't track anyone. Do Not Track and Global Privacy Control signals change nothing here, and nothing on this site lets another party collect information about your activity across websites or over time.

Security

Every page is served only over HTTPS, and browsers are told to insist on it. The site runs no third-party code, and its headers stop other sites from embedding it in a frame. There's very little here to protect in the first place, because the site holds no visitor data.

Laws this notice follows

This notice gives the information required by the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. Where they apply to a visit, it's also written to meet the EU General Data Protection Regulation (Regulation (EU) 2016/679), the UK GDPR, the UK Privacy and Electronic Communications Regulations as amended by the Data (Use and Access) Act 2025, and the California Online Privacy Protection Act.

Changes to this notice

If what the site does with data changes, I'll update this page before the change takes effect, change the date at the top, and add a line below saying what changed.

  • : first version.