Privacy Policy

Last updated: 10 November 2026

Who is responsible

This policy covers the website sahalnazar.com. The person responsible for it is Sahal Nazar, an independent developer. You can reach me about anything in this policy at hello@sahalnazar.com. My apps have their own privacy policies, linked at the bottom of this page.

What data is processed

I keep this to a minimum. The site has no accounts, no contact form, no advertising and no embedded social media widgets.

Analytics (only if you accept): pages viewed, page titles, the referring page, your browser and device type, language, and an approximate location (country or city) derived from your IP address. Google Analytics 4 does not log or store full IP addresses. It sets two first-party cookies, _ga and _ga_<ID>, which hold a random identifier so visits can be counted. If you decline, none of this is collected and these cookies are not set.
Hosting logs: every request to the site is received by Firebase Hosting, which means Google processes your IP address, the page requested, your browser's user agent and the time of the request. These logs exist to deliver the site and keep it secure, and I do not use them to identify visitors.
Your cookie choice: whether you accepted or declined is stored in your browser's local storage on your device. It is not sent to me.
Email: if you write to hello@sahalnazar.com, I receive your email address and what you send. I use it only to reply and keep it for as long as the conversation needs.
App account-deletion pages: if you sign in on a page such as an app's "Delete account" page, Firebase Authentication (and Google Sign-In, if you choose it) processes your credentials to verify who you are so your account can be deleted. This is covered further in the relevant app's policy.

Why, and on what legal basis

Analytics runs because you consented to it, and you can withdraw that consent at any time. Hosting logs are processed because it is in my legitimate interest, and yours, for the site to be delivered reliably and securely. Replying to emails is based on your request. Where laws such as the GDPR do not apply, I follow the same practices.

Third-party providers

These companies process data on my behalf or as part of the service you use. They receive your data directly from your browser.

Google Analytics for Firebase (Google LLC): Website analytics, only after you accept cookies.
Firebase Hosting (Google LLC): Serves this website through Google's content delivery network.
Firebase Authentication and Google Sign-In (Google LLC): Only on the app account-deletion pages, if you choose to sign in there.

I do not sell your data, and I do not use it for advertising or share it with anyone else. The site also links out to other services, which are separate from this site and run by other companies. Opening those links sends your data to them under their own policies:

Cookies and your choices

When you first visit, a banner asks whether you accept analytics cookies. Until you accept, no Google Analytics script is loaded and no analytics cookies are set. You can change your mind at any time:

Use (also in the footer of the home page) to accept or decline. Declining stops collection and deletes the analytics cookies.
Delete cookies and site data in your browser settings, or block them entirely. The site works the same without them.
Install the Google Analytics opt-out browser add-on.

How long data is kept

Google Analytics event data is kept for 14 months and is then deleted automatically. Hosting logs are kept by Google according to its own retention policy. Emails are kept for as long as needed to deal with your request, and I delete them on request.

International transfers

Google operates data centres in many countries, so data from this site may be processed outside the country where you live, including in the United States. Google relies on safeguards such as the EU–US Data Privacy Framework and standard contractual clauses for those transfers.

Your data rights

Depending on where you live, you have some or all of the following rights. I will honour them wherever I reasonably can, wherever you are.

Access: ask what data I hold about you and get a copy.
Correction: have inaccurate data fixed.
Deletion: ask me to erase your data.
Restriction and objection: ask me to pause or stop certain processing.
Portability: receive your data in a common format.
Withdraw consent: at any time, using Cookie settings above, without affecting earlier processing.
California (CCPA/CPRA): the right to know, delete and correct, and to opt out of the sale or sharing of personal information. I do not sell or share personal information.
India (DPDP Act): the right to access, correct and erase your data, to nominate someone to act for you, and to a grievance redressal.
Complaints: you may complain to your local data protection authority, such as the ICO in the UK or your national supervisory authority in the EU.

To exercise any of these rights, email hello@sahalnazar.com with the subject "Privacy request". I may ask you to confirm you are the person the request is about, and I aim to reply within 30 days. Analytics data is not tied to your name or email, so to find it I would need the identifier from your _ga cookie. Anything held by Google is also controlled through your Google account settings.

Children

This site is not directed at children under 13, and I do not knowingly collect their data.

Changes to this policy

If I change how the site handles data, I will update this page and the date at the top. Material changes will be described here.

Contact

Questions, concerns or requests about your data: hello@sahalnazar.com.

Privacy policies for my apps

Each app has its own policy covering the data that app processes: