// legal

Privacy Policy

Last updated: October 3, 2026

·Terms & Conditions →

This policy explains what personal data anjana784.dev collects, why, and what your rights are. It is written plainly — not to obscure anything.

01Who operates this site

This website is operated by anjana784, an individual based in Sri Lanka. It is a personal portfolio and blog — not a company, not a registered business entity operating under a trading name.

For any privacy-related questions, you can reach me at hello@anjana784.dev.

02What data we collect

This site collects the minimum data necessary to operate. There are four contexts where personal data is involved:

Contact form. When you submit the contact form, I collect your name, your email address, and the message you wrote. This data is used solely to respond to your inquiry.

Newsletter. If you subscribe, I collect your email address and the date you subscribed. The list is held by Resend on my behalf and is used only to send you the writing and project updates you asked for.

Comments. Blog comments run on giscus, which stores threads in GitHub Discussions. If you comment, GitHub processes your GitHub account and the content you post under GitHub's privacy statement. I never receive your email address through comments.

Server logs. Like all web servers, the hosting infrastructure (Vercel) may log basic request data including your IP address and browser information. This is handled by Vercel under their own privacy policy and is not something I actively collect or review.

This site does not use analytics software, tracking pixels, or advertising networks. The one third-party embed is the giscus comments frame described above, and it loads on blog posts only.

03How your data is used

Each kind of data has exactly one purpose:

  • To read and respond to your message.
  • To send you the newsletter you explicitly signed up for.

Neither is shared with third parties for commercial purposes, used to build advertising profiles, or sold. Ever. Comments are handled entirely by GitHub, as described in section 02, and I do not process them at all.

04Storage and retention

Contact form submissions are sent via Resend, a transactional email service. Your submission is transmitted to my personal inbox. Resend's privacy policy governs how they handle data in transit.

Once I have responded, I do not retain your data in any database or system beyond my personal email. I do not store form submissions in any persistent application database.

Email correspondence is retained only as long as is reasonably necessary for the purposes of the conversation. You can request deletion at any time (see section 06).

Newsletter. Your address stays in Resend's subscriber list until you unsubscribe. Every email carries a one-click unsubscribe link, and unsubscribing removes you from the list. I keep no separate copy in a database of my own.

Comments. Comment threads stay in GitHub Discussions for as long as the post exists. Deleting your comment removes it; GitHub's own retention rules govern everything else.

05Cookies

This site does not use tracking cookies, advertising cookies, or analytics cookies.

The only cookies that may be set are strictly technical ones required for the site to function (such as those set by the hosting infrastructure). These do not track you across sites and do not require your consent under GDPR or equivalent regulations.

One exception: if you choose to sign in to comment on a blog post, GitHub sets cookies so the comments frame knows who you are. Those are set only after you actively sign in — a reader who never comments never receives them — and are governed by GitHub's own cookie policy.

If analytics are added in the future, this policy will be updated before they go live and the date will be updated at the top of this page.

06Your rights

Depending on where you are located, you may have rights under the EU General Data Protection Regulation (GDPR), Sri Lanka's Personal Data Protection Act (PDPA 2022), or equivalent local legislation. These generally include the right to:

  • Access the personal data I hold about you.
  • Correct inaccurate personal data.
  • Request deletion of your personal data.
  • Object to or restrict processing of your personal data.
  • Receive your data in a portable format.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, email me at hello@anjana784.dev. I will respond within 30 days. Since this is a personal site with minimal data, requests are typically straightforward to fulfil.

08Changes to this policy

If this policy changes materially — for example, if analytics are added — the “Last updated” date at the top of this page will reflect the date of the change. For significant changes, I will note them in a changelog below.

Continued use of the site after a policy update constitutes acceptance of the revised policy.

09Privacy questions

If you have a question about this policy or want to exercise a data right, the best way to reach me is by email:

hello@anjana784.dev

Alternatively, you can use the contact form.