This Privacy Statement explains how ilham.dev (“the Site”), operated by Ilham Andika (“I”, “me”, or “my”), handles information when you visit. I aim to collect as little as reasonably possible and to be transparent about what is handled.

1. Information I Collect

The Site is a static website and does not require an account. I do not intentionally collect personal information that identifies you, except in the following cases:

  • Information you send me. If you email me or otherwise contact me, I receive the information you choose to share (such as your name, email address, and message).
  • Technical data. Like most websites, the infrastructure that serves the Site may process standard technical information such as your IP address, browser type, requested URL, and timestamps, in order to deliver the Site and protect it from abuse.

2. How Information Is Used

  • to respond to your messages and inquiries;
  • to operate, maintain, and secure the Site;
  • to diagnose technical problems and prevent abuse or attacks;
  • to comply with applicable legal obligations.

I do not sell your personal information, and I do not use it for advertising.

3. Cookies and Similar Technologies

The Site itself does not set advertising or tracking cookies, and it does not run any analytics. However, third-party services used to operate the Site (see below) may set cookies or similar identifiers as part of their normal operation. In particular, comments on posts are stored as GitHub Discussions and shown through giscus, an embedded frame served from giscus.app that may set cookies when GitHub handles your sign-in or session. You can control cookies through your browser settings.

The search companion stores its position and hidden state in your browser’s local storage. Its public quote list is cached for up to 24 hours before refreshing, along with the last displayed quote to avoid immediate repeats. Search terms are not stored in these companion preferences or sent to the quote provider. Guide invitations keep only the last wording variant’s number in session storage within the current tab, so the next tool page can use different wording. Tool names and inputs are not stored in that value.

4. Third-Party Services

  • GitHub Pages hosts the Site. When the Site is served, GitHub may process technical data such as your IP address and user agent in its logs as part of delivering the pages. See GitHub’s privacy statement for details.
  • Cloudflare provides DNS (and, where enabled, security and delivery in front of the Site). Cloudflare may process technical data such as IP addresses as a data processor in order to provide these services. See Cloudflare’s privacy policy for details.
  • giscus and GitHub provide the comment system on posts. Comments are stored as GitHub Discussions in a public repository, and the comment widget is an embedded frame served by giscus.app. When a post page loads, GitHub and giscus may process technical data such as your IP address and browser information. Posting a comment requires signing in with a GitHub account. See GitHub’s privacy statement and the giscus documentation for details.
  • Search companion quotes come from DummyJSON. When the companion is visible and idle, your browser may request a list of English quotes from this service. The provider receives normal connection information, including your IP address. Requests omit cookies, credentials, the page referrer, and search input. A fresh local cache avoids a request on every page load; if the service is unavailable, the companion keeps working without new quotes.
  • Read aloud. Post pages offer an optional read-aloud button that uses the speech synthesis built into your browser or operating system. The Site does not store the article text or send it anywhere itself, and the choice is never recorded. Speech is produced on-device when your browser offers a local voice; if it falls back to a networked voice supplied by your browser vendor, that vendor’s privacy policy applies to the spoken text.
  • Tools that contact third parties. A few tools reach out to public services to do their job, and each one sends only the value you type in. IP Lookup sends the address to ipwho.is (falling back to freeipapi.com). DNS Lookup sends the name to Google Public DNS or Cloudflare’s DNS-over-HTTPS resolver. WHOIS Lookup sends the domain to the IANA bootstrap directory, the registry’s own RDAP service and rdap.org. The request testers (CORS Checker, HTTP Request Tester, Webhook Tester, gRPC Tester and WebSocket Tester) send your request to whatever URL you enter. The JavaScript Playground loads the Monaco editor from cdn.jsdelivr.net the first time you enable it. Every other tool processes its inputs entirely in your browser; the site-wide companion quote request described above is separate from tool inputs.
  • External links, for example to GitHub, are governed by those sites’ own privacy policies.

5. Log Data and Retention

Server and security logs may be retained for a limited period as necessary for security, troubleshooting, and legal compliance, and are then deleted or anonymized. Information you send me by email is retained only for as long as needed to handle your request and maintain reasonable records.

Where applicable law (such as the GDPR) requires a legal basis, processing is based on my legitimate interests in operating and securing the Site, your consent where you contact me, and compliance with legal obligations.

7. Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, and to object to processing or request data portability. To exercise any of these rights, contact me at the address below. You may also lodge a complaint with your local data protection authority.

8. Security

I take reasonable technical and organizational measures to protect information handled through the Site, including encrypted connections (HTTPS) and restricted access. No method of transmission or storage is completely secure, and I cannot guarantee absolute security.

9. International Transfers

The Site is served through a global content delivery network, so technical data may be processed in countries other than your own. Where required, appropriate safeguards are used for such transfers.

10. Children’s Privacy

The Site is not directed to children under the age of 13, and I do not knowingly collect personal information from them. If you believe a child has provided personal information, please contact me so I can remove it.

11. Changes to This Statement

I may update this Privacy Statement from time to time. When I do, I will revise the “Last updated” date above. Material changes will be reflected on this page.

12. Contact

For any privacy-related question or request, contact me at hai@ilham.dev.

Note: This page is provided for general informational purposes and does not constitute legal advice. Please consult a qualified professional for advice specific to your situation.