Privacy Policy

Welcome to sakibsadman.site (the “Website”), operated by Sakib Sadman (“I”, “me”, or “my”). This Privacy Policy explains how personal and non-personal data is collected, used, and safeguarded when you visit this developer portfolio or communicate through its integrated contact channels.

I am committed to respecting your privacy, complying with applicable data protection regulations (including the general principles of the EU General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA)), and maintaining full transparency.

We collect information in two principal ways:

• Information You Voluntarily Provide: When you submit a message using the Contact Form on this site, we collect your Full Name, Email Address, Subject Category, and the Body Message.
• Automatically Collected Technical Data: When you navigate the Website, certain technical logs may be automatically recorded by hosting infrastructure and analytics suites, including:
  • Anonymized IP address and approximate geographical location (country/city level).
  • Browser type, version, rendering engine, and operating system.
  • Pages visited, session duration, and referrers (the URL you navigated from).
  • Device screen dimensions and viewport resolution.
• Local Storage Settings: To remember your visual preferences, this Website saves two non-identifying keys in your browser's LocalStorage:
  • sakib_portfolio_theme: Remembers “dark” or “light” mode.
  • sakib_portfolio_color: Remembers your selected accent color theme index.
  These LocalStorage entries contain zero personal identifiers or tracking beacons.

The information gathered is used exclusively for legitimate professional purposes:

• To review, respond to, and fulfill professional inquiries, employment offers, and client contract requests.
• To monitor website uptime, diagnose frontend/backend errors, and assess performance metrics.
• To safeguard against automated abuse, spam submissions, denial-of-service attempts, and cyber threats.
• To understand how visitors discover and interact with the portfolio to continuously improve content and user experience.

I never sell, rent, monetize, or trade your personal information with third-party marketers or advertisers under any circumstances.

This Website interfaces with select third-party services to deliver reliable performance, analytics, and notification delivery:

• Google Analytics (GA4) / Google Tag Manager: Used to track aggregated, anonymous traffic patterns, popular content, and visitor demographics. Google Analytics uses first-party cookies (e.g. _ga). You can prevent Google Analytics from tracking your activity across the web by installing the Google Analytics Opt-out Browser Add-on.
• Vercel Analytics & Speed Insights: Vercel hosts this Next.js web application and provides privacy-friendly, cookieless Core Web Vitals diagnostics to ensure optimal loading performance.
• Telegram Bot API: Inbound contact form submissions are processed via a serverless API route and forwarded securely via TLS to a private Telegram bot on my personal device, ensuring rapid communication response.
• GitHub: Live GitHub contributions and repository commit metadata are retrieved anonymously via the public GitHub REST API.

Your information security is paramount. This Website implements modern technical safeguards, including:

• End-to-end transport encryption via modern TLS/HTTPS.
• HTTP Strict Transport Security (HSTS) with preloading enabled.
• Strict Content-Security headers (X-Frame-Options: SAMEORIGIN, X-Content-Type-Options: nosniff).
• Server-side input sanitization and strict schema validation using Zod.

While no method of electronic storage or internet transmission is 100% invulnerable, I apply industry-standard practices to protect all incoming data from unauthorized access or alteration.

Messages and inquiries sent via the Contact Form are retained only for the duration necessary to engage in correspondence, manage mutual business agreements, or fulfill legal obligations. Inactive inquiries are periodically deleted. Aggregated analytics logs are governed by Google Analytics and Vercel standard data retention schedules (typically 2 to 14 months).

Depending on your jurisdiction, you possess specific rights regarding your personal data:

• Right to Access: You may request a copy of the personal details stored about you.
• Right to Rectification: You may request correction of any inaccurate or outdated information.
• Right to Erasure (“Right to be Forgotten”): You may request the permanent deletion of your messages and contact records from our communication logs.
• Right to Restrict or Object: You may object to the processing of your personal information at any time.

To exercise any of these rights, simply email sakib09837@gmail.com with the subject “Privacy Request”. Requests will be addressed promptly within 30 days without charge.

If you have questions, feedback, or concerns regarding this Privacy Policy or your data, please reach out directly: