Privacypolicy.

This policy explains what information aliabbas.dev collects, why it is used, how long it is retained, and the choices available to visitors. The site is operated by Ali Abbas as a professional portfolio and publishing website.

Information collected through this site is not sold, rented, or shared for cross-context behavioral advertising.

When you send a message to the portfolio chatbot, the site stores:

• The complete conversation, including AI responses.
• Server-generated timestamps.
• Approximate country, region, and city derived by Cloudflare from the network request.
• Browser, operating system, device category, and the full user agent string.
• A random conversation identifier and response status.

The chat database does not store your raw IP address, precise latitude or longitude, or postal code. Network providers may process an IP address transiently to deliver and secure the service.

Conversations are reviewed to understand what visitors ask, operate and improve the assistant, diagnose failures, and prevent abuse. Do not submit confidential, legally privileged, or sensitive personal information.

The contact form collects your name, email address, and message so Ali can receive and respond to your inquiry.

If you create an account to comment on a note, the authentication service processes account details such as your name, email, verification status, login credentials, profile image, and session information. Public comments display the name, image, and content you choose to publish.

Hosting and security providers may generate limited technical logs, such as request times, network information, errors, and security events.

Cloudflare provides hosting, security, approximate geolocation, chatbot storage through D1, and AI inference through Workers AI. Cloudflare states that Workers AI customer content is not used to train models or improve its services without explicit consent.

Convex and Better Auth provide account, authentication, and comment infrastructure. Resend delivers contact, verification, password-reset, and comment-notification emails. GitHub processes information if you choose GitHub sign-in. Google provides the web fonts loaded by the site, and Sanity provides public portfolio content and media.

These providers process information under their own terms and privacy commitments only as needed to provide their services.

Chat conversations and associated metadata are automatically deleted no later than 90 days after the last message. You may also delete the active conversation immediately using the trash button in the chat header.

Contact messages are retained for as long as reasonably necessary to respond and maintain relevant professional correspondence. Accounts and comments are retained until removed or until a valid deletion request is completed. Provider security logs follow the applicable provider’s retention schedule.

You can use the site without creating an account or using the chatbot. You can start a fresh chat without deleting the prior conversation, or permanently delete the active conversation with the trash button.

Depending on where you live and which law applies, you may have rights to request access, correction, or deletion of personal information and to receive information about how it is handled. Requests can be submitted through the contact page. Reasonable verification may be required before fulfilling a request.

The site does not use advertising cookies or sell or share personal information for targeted advertising. Because there is no sale or advertising share to opt out of, Global Privacy Control and browser Do Not Track signals do not change the site’s current behavior.

Authentication may use strictly necessary cookies to keep signed-in users secure. The anonymous chatbot conversation identifier is held only for the current page session.

Reasonable technical and organizational safeguards are used to protect stored information, including authenticated access to the private conversation viewer and encrypted transport. No online system can guarantee absolute security.

This service is not directed to children under 13. This policy may be updated as the site or its providers change. The effective date above will be revised when material changes are published.

Questions about this policy or privacy requests can be sent through the contact page.