What this site keeps about you

This is a personal site run by Firman Hanafi. There are no ads, no third-party trackers, and nothing is sold or shared for marketing. This page lists everything that is kept.

When you read

Like every web server, this one logs each request: your IP address, the page, the time, the page you came from, your browser's user agent, and the country Cloudflare derives from your address. The raw logs are deleted after 7 days. Aggregated statistics built from them (most-read pages, visiting addresses, bots versus browsers) are kept for up to180 days and are visible only to me.

All traffic passes through Cloudflare, which protects and caches the site.

When you sign in

Sign-in is through GitHub or Google. From them this site keeps only your account's id at that provider, your display name and your avatar URL, so your name can appear next to what you write.No email address and no password is ever stored.

Signing in sets one cookie holding a random session token. The server stores only a hash of it, and the session ends after 30 days or when you sign out.

What you create

Comments and reactions are public, shown with your display name and avatar. Quiz attempts and answers, lesson progress and certificates are linked to your account; leaderboards show your display name.

In your browser

Two settings are kept in your browser's local storage: your light/dark theme and whether the course sidebar is open. They never leave your device.

Backups

The database is backed up every night and before every update. Backups are kept for a limited time, up to 90 days, and are encrypted when stored away from the server.

Removing your data

Email [email protected] and I will delete your account and everything linked to it. Backups age out on their own within 90 days.