Skip to content

Privacy Policy

Last updated: 26 September 2026

The short version

No advertising, and nothing that follows you across sites. I count visits with Cloudflare Web Analytics, which sets no cookies and shows me totals, not people. Beyond those counts, nothing is collected about you unless you fill in one of the two forms.

Who I am

Ijal Fauzi, a full-stack web engineer in Bekasi, West Java, Indonesia. For anything about this policy, or to exercise any right below, email hello@ijalfauzi.com. Please read it alongside my Terms of Service.

What I collect

Visit counts, and what you type into one of two forms. Neither form is needed to read anything.

Visit statistics come from Cloudflare Web Analytics: which page was viewed, the site that linked to it, the browser and device type, and the country. It uses no cookies or local storage and does not identify you, and I only ever see totals.

A project inquiry takes your name, email address, business name, project type, timeline, budget with its currency, and what you tell me about the project. I also record which page you sent it from.

A CV request takes your name, email address, phone number with its country code, company, occupation, why you are asking, and optionally a LinkedIn profile and a message. The CV is not published openly, which is why the form asks who is asking.

Both forms have a consent box, and I record when you ticked it. I reply by email, or by WhatsApp or Telegram if you gave me a number.

There are no accounts, no comment form, no orders, and no payments on this site.

Who else touches it

  • Cloudflare hosts the site, counts visits with Web Analytics, and stores submissions in its D1 database. Its Turnstile check tells people from bots on both forms: submitting sends your IP address to Cloudflare, and I never store it.
  • Brevo emails me a copy, and sends you the CV link. That link carries your email address and expires 24 hours after it is issued, so treat it as private.
  • Gravatar serves the avatars on blog posts, identified by a one-way hash of the commenter’s address. Your browser fetches them directly.
  • YouTube serves the player on eight posts. Those pages load it from Google, which may set cookies of its own.

Nothing is sold, rented, or shared for marketing, and nothing reaches anyone else. All four operate internationally, so your data may be handled outside Indonesia.

Cookies and your device

This site sets no cookies of its own, and its visit counting uses none. It remembers which colour theme you chose in your browser’s local storage, on your device only. Turnstile and the YouTube player may set cookies of their own.

How long I keep it

Form submissions stay while the conversation is live. Once a year I review what is stored and delete anything older than 24 months since we last spoke. Ask sooner and I will delete it and confirm when it is done. Visit statistics are totals with nothing to identify you, and Cloudflare keeps them under its own retention.

Your rights

Under Indonesia’s Personal Data Protection Law (UU No. 27 of 2022) you can ask what I hold, correct it, delete it, or withdraw your consent. Email me, and you do not have to say why.

The rest

Submissions travel over HTTPS and the inbox is behind a login, though nothing on the internet is ever perfectly secure. If this policy changes, the date above changes with it. Indonesian law governs it.