Legal
Privacy Policy
Effective date: July 2, 2026
This policy explains what information is collected when you visit https://arsalansadiq.com (the "Site"), operated by Arsalan Sadiq, and how it is used. The Site is a personal portfolio — there is no user registration, no advertising, and no sale of personal data.
1. Information Collected
Analytics (Umami Cloud)
The Site uses Umami, a privacy-first analytics tool. Umami records page views, the referring URL, browser type, operating system, device category, and approximate country derived from your IP address. Your IP address is not stored by Umami — it is used only to infer country and is then discarded. Umami does not use cookies or fingerprinting and does not track you across websites. Data is processed by Umami Software Inc. under their privacy-by-design architecture.
You may opt out at any time using the notice at the bottom of this page.
Meeting Bookings (Cal.com)
If you book a meeting, the booking form collects your first name, last name, email address, company name (optional), meeting topic, and notes (optional). This data is submitted directly to Cal.com (Calcom Inc.) to create and manage the calendar event. It is not stored in this Site's database. Cal.com uses this data to send you confirmation and reminder emails. Please review Cal.com's Privacy Policy for details on how they handle your data.
Timezone Detection (timeapi.io)
When you open the booking overlay and your browser reports an ambiguous timezone (UTC), the Site sends your IP address to timeapi.io to detect your timezone. The timezone string is cached in your browser's sessionStorage for the duration of your tab session and is never stored in this Site's database. This call is only made server-side; your IP is not exposed to the browser.
Analytics Consent Records
When you interact with the analytics notice banner, your choice (opt in or opt out) is stored in this Site's database alongside an anonymous session identifier (a random UUID generated in your browser), the timestamp, and your browser's user-agent string. No name, email, or IP address is stored in this record.
2. Cookies & Browser Storage
| Name | Type | Purpose | Expires |
|---|---|---|---|
| authjs.session-token | HTTP-only cookie | Admin authentication — only set when the site owner logs in. Not set for public visitors. | 20 min |
| privacy-notice | localStorage | Stores your analytics consent choice (granted / denied). | Persistent |
| umami.disabled | localStorage | Set when you opt out; instructs Umami to stop tracking. | Persistent |
| __tz_detected | sessionStorage | Caches your detected timezone for the booking form. | Tab session |
3. Legal Basis (GDPR)
If you are located in the European Economic Area, the following legal bases apply:
- →Legitimate interest — cookieless, anonymized analytics via Umami (Art. 6(1)(f) GDPR). The interest is understanding which content is useful without collecting personal data.
- →Contract performance — processing booking data to schedule and conduct meetings you request (Art. 6(1)(b)).
- →Legitimate interest — timezone detection via timeapi.io to improve the booking experience (Art. 6(1)(f)).
4. Third-Party Processors
| Service | Purpose | Data sent |
|---|---|---|
| Umami Cloud | Analytics | Page URL, referrer, browser/OS/device, country (IP discarded) |
| Cal.com | Meeting scheduling | Name, email, company, meeting topic, notes |
| timeapi.io | Timezone detection | IP address (server-side only, not stored) |
| Netlify | Hosting & CDN | Standard web request logs (IP, URL, timestamp) |
5. Data Retention
- →Analytics data — retained by Umami per their data retention policy. Aggregated and not personally identifiable.
- →Booking data — retained by Cal.com per their policy. Contact Cal.com directly to request deletion.
- →Consent records — retained indefinitely as a legal audit trail. Contains no personal data beyond an anonymous session ID and user-agent string.
6. Your Rights
Under GDPR and PIPEDA you have the right to access, correct, or request deletion of personal data held about you. Since this Site stores minimal data directly, most requests will involve contacting Cal.com (for booking data) or Umami (for analytics).
You may also opt out of analytics at any time by clicking "Opt out" in the banner at the bottom of the page, or by setting umami.disabled = 1 in your browser's localStorage.
7. Contact
Questions or requests regarding this policy can be directed to arsalan.sadiq@hotmail.com.
8. Changes to This Policy
If this policy changes materially, the effective date above will be updated. Continued use of the Site after changes constitutes acceptance of the revised policy.