Legal / Privacy
Privacy Policy
Written for this site specifically, not pasted from a generator. It describes what the code in this repository really does. I am the data controller for everything collected here, working from Janakpur, Nepal. Last updated 2026-09-30.
What I actually collect
When you submit the contact form, the message is sent to /api/contact, which forwards it as an email through Resend (the sending provider) to me. The fields are your name, your email address, the topic you pick, and what you wrote. Your email address is used as the reply-to so you can answer from your inbox.
That is the whole list. This site has no database, no user accounts, no sign-up, no comments, and no newsletter. Submitted messages are not written to storage by the site — they live in my mailbox, and I keep them only as long as it takes to reply and wrap up the conversation.
Data that reaches a server anyway
Two things are unavoidable once a page loads over the internet. The hosting platform (Vercel) sees each request, including the IP address, user agent and referrer, and keeps short-lived request logs for operating the service. My API route also reads your IP to rate-limit form submissions — five per minute, held in memory only, so it disappears when the function instance stops.
The stylesheet pulls three webfonts from Google Fonts, which means your browser makes a request to Google and Google sees your IP address as part of serving that file. If you block fonts.googleapis.com, the site still renders with the fallback fonts.
The 3D object on the home page loads one lighting asset from raw.githack.com, a CDN the three.js community uses. It is a file request, not a script that reads your browser, and it happens only while that scene is on screen. Blocking it leaves the page working; the object simply renders without its reflections.
Analytics, and the consent choice
Traffic measurement is off until you say otherwise. If you click “Allow analytics”, the page loads Vercel Web Analytics and Speed Insights, which record aggregate page views and timing numbers. They are first-party and cookieless, so they do not build a cross-site profile of you. Your choice is remembered in your browser’s local storage under amanyadav.analytics-consent, and nothing is sent before you choose.
“Essential only” keeps the site exactly as it is now: no analytics scripts are fetched at all. You can change your mind by clearing site data, and I will happily add a visible switch if you email me and ask.
Who else sees it
Nobody buys or sells data here. The providers named above — Resend for email delivery, Vercel for hosting and optional analytics, Google for fonts — process it on their side under their own policies. I do not run advertising pixels, and I do not share your message with anyone else unless you hire me and the work pulls in a contractor or a client you already know about.
Your choices
Ask me at hello@amanyadav.dev and I will tell you what I hold about you, correct it, or delete it — including any email you sent through the form. The same address works to withdraw consent or to complain. If you are in the EEA or UK you also have the right to lodge a complaint with your data protection authority; in Nepal the Individual Privacy Act, 2075 (2018) governs personal data and gives you the right to ask what is held about you and have it corrected.
Children
This site is written for adults hiring a developer and is not directed at children. I do not knowingly gather information from anyone under sixteen; if that happens, email me and it gets deleted.