Privacy policy
This site is a personal portfolio. It sets no advertising cookies and does not build visitor profiles. What is collected, and why, is listed below.
Controller
Yazan Alrefaai, Damascus, Syria — alrefaai37@gmail.com
Contact form
The form collects your name, email address, and message. It is transmitted by FormSubmit (formsubmit.co), a third-party form-delivery service, which forwards it to my inbox. Your data is used only to answer your enquiry. Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract) or Art. 6(1)(f) GDPR (legitimate interest in replying). Retention: enquiries are kept in my mailbox for as long as needed to handle them, then deleted on request.
Hosting
The site is hosted by Vercel Inc. Vercel processes server log data (IP address, time of request, browser and operating system) to deliver the site and protect it from abuse. Legal basis: Art. 6(1)(f) GDPR.
Analytics
This site uses Vercel Web Analytics, which counts page views without cookies and without storing any identifier that would let a visitor be recognised again. No cross-site tracking takes place. Legal basis: Art. 6(1)(f) GDPR.
Third-party content
No page on this site embeds content from a third-party server. Fonts, images, and the GitHub contribution graph are all served from this domain, so no request leaves it while you browse and no other provider receives your IP address. The only outbound transfer happens if you submit the contact form, described above.
Local storage
Your theme (dark/light) and language choice are saved in your browser's local storage. This stays on your device, is never sent to a server, and is not used to identify you. Clearing your browser data removes it.
Your rights
If you are in the EU/EEA or the UK you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. To exercise any of these, email alrefaai37@gmail.com. You also have the right to lodge a complaint with your national data protection authority.
International transfers
I am based in Syria, and the providers named above are based in the United States. Data you send through this site is therefore processed outside the EU/EEA, in countries without an EU adequacy decision. By using the contact form you accept this transfer; if you would rather not, email me directly instead.
Last updated: July 26, 2026