Skip to main content

Privacy Policy

Last Updated: September 28, 2026

1. Introduction

Muhammad Saeed ("I", "me", "my") operates mhsaeed.com (the "Site"). This page informs you of my policies regarding the collection, use, and disclosure of personal information when you use my Site and services.

I respect your privacy and am committed to protecting your personal data. This privacy policy explains how I collect, use, and safeguard your information.

2. Information I Collect

Information You Provide

When you use the contact form or engage my services, I may collect your name, email address, company name, and project details.

Information Collected Automatically

  • IP Address — Used for security monitoring and analytics.
  • Browser Type — Used for site optimization.
  • Pages Visited — Used to improve user experience.

3. How I Use Your Information

  • Respond to inquiries and contact form submissions.
  • Provide contracted development services.
  • Send project updates, invoices, and deliverables.
  • Meet legal and regulatory obligations.

I do NOT: sell your personal information, share your project details without consent, or send unsolicited marketing emails.

4. Data Protection & Retention

Security: All data is transmitted via HTTPS/TLS and stored on secure servers with limited access control.

Retention: Contact submissions are kept for the duration of our relationship + 2 years. Project files are retained for 1 year post-completion.

5. Cookies & Analytics

I use two categories of browser storage: necessary (required for the Site to function; always on) and analytics (off until you opt in). Your choice is saved in your browser under the localStorage keys "cookie-consent" and "cookie-preferences". Those saved values stay in your browser; when Google Analytics is enabled, the resulting consent state is also sent to Google so its tag can respect your choice.

  • Google Analytics — Google Analytics 4 uses advanced Google Consent Mode v2. When enabled, its tag can load before you choose and may send your consent status and cookieless measurements to Google while analytics storage is denied. Analytics storage is granted only after you opt in; advertising storage, ad user data, and ad personalization signals are always denied. If the consent banner is disabled, Google Analytics is not loaded.
  • Changing your mind — Use the "Manage cookies" link in the Site footer at any time; it clears your saved choice and re-opens the consent banner.
  • Declining — Declining analytics does not block or limit any content or feature on the Site.

6. Third-Party Services

I use trusted services that may process data on my behalf:

  • Google Analytics — Site usage statistics.
  • Calendly — Appointment scheduling.
  • Hetzner — Site hosting and the Site's database, on servers in Germany.
  • Cloudflare — Storage of the Site's images and of its database backups.
  • Upstash — Short-lived request counters that limit abuse, keyed by network address, and live updates to comment threads.
  • Sentry — Error monitoring and diagnostic reporting.
  • Auth.js (NextAuth) — Secure authentication via Google, GitHub, and email for site comments.
  • Google (Gmail) — Sending the Site's email: contact-form replies, sign-in links, and the newsletter.
  • OpenAI — Automated screening of new and edited comments for harmful content: the text of your comment and your display name. OpenAI does not keep this data or use it for training.
  • Slack — New-enquiry alerts to me: your name, email address, the enquiry type and budget range you chose, and the start of your message. Also alerts about comments held for review or hidden after reader reports: the commenter's display name and the start of the comment.

7. Contact

For privacy-related questions or to exercise your rights (Access, Correction, Deletion), contact me at:

privacy@mhsaeed.com