Last updated: August 16, 2026
This page explains what personal data is collected when you use this website, why it is collected, how long it is kept, who it is shared with, and what rights you have.
This website is operated by Mohamed GALY, based in Europe. Questions or privacy requests: [email protected].
When you send a message, I collect your name, email address, subject, and message. If you attach a file, it is forwarded to my email. The file is never saved in the database — only a flag that an attachment was included.
Purpose: to reply to you. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
These forms collect your name, email address, the reason for the request, and a phone number (required for a callback, optional for a CV request).
Purpose: to process and respond to your request. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
A public comment or a private question on an Insight post collects your name, email address, and message. Private questions may also include a subject and an optional file (the file is emailed, not stored). Email addresses on public comments are not shown to other visitors. Private questions are never published.
Legal basis: legitimate interest (Article 6(1)(f) GDPR).
If you report a comment or ask for it to be deleted, I collect your email address and any message you add. That request is stored and emailed to me so I can review it.
Legal basis: legitimate interest (Article 6(1)(f) GDPR).
If you subscribe, your email address is stored. You can unsubscribe at any time on the unsubscribe page. After you unsubscribe, the record is marked inactive and no further emails are sent. The address is permanently deleted if you ask.
Legal basis: consent (Article 6(1)(a) GDPR). Subscribing is how you give that consent. You can withdraw it at any time by unsubscribing.
When you open an Insight post, a simple view counter is increased. To avoid counting the same visit twice, your IP address is kept in the server’s memory for up to 24 hours, together with the post ID. It is not written to the database and is not used to identify you or build a profile.
Legal basis: legitimate interest (Article 6(1)(f) GDPR) — understanding which articles are read.
Your IP address may be used for a short time to limit repeated form submissions (for example newsletter subscribe/unsubscribe and comment reports) and to verify CAPTCHA tokens. These checks stay in memory and are not stored as a visitor profile.
Legal basis: legitimate interest (Article 6(1)(f) GDPR) — keeping the site usable and free of spam.
Your data is never sold, rented, or shared with third parties for advertising or marketing.
I operate this site from Europe. Form submissions, comments, and newsletter addresses are stored in a MySQL database on the production host. Database connections use TLS. The site is served over HTTPS with HSTS.
Visitor traffic typically reaches the site through Cloudflare. The application host and Cloudflare may process data outside the European Economic Area. See section 5.
File attachments on forms are emailed to me and are not written to the database.
This website sets only essential cookies for visitors. There are no advertising, analytics, or tracking cookies from this site.
If an Insight post embeds a YouTube video, YouTube may set its own cookies. Those are not set by this site. See section 5.
Some services process limited data so the site can run. Several of them may handle data outside the European Economic Area (often in the United States). They do so under their own terms and transfer safeguards.
In production, visitor requests usually go through Cloudflare. Cloudflare may see your IP address, browser details, and the pages you request, as any CDN or reverse proxy would.
The Turnstile CAPTCHA script is loaded on public pages. When you submit a protected form (contact, callback, CV request, comments, and private questions), your IP address and browser interaction data are sent to Cloudflare to check that you are not a bot. Newsletter subscribe/unsubscribe and comment report forms are not protected by Turnstile; they use rate limiting instead.
Images in some Insight posts are served from Cloudflare R2. Opening those pages makes your browser request the files from Cloudflare.
Cloudflare’s privacy policy: cloudflare.com/privacypolicy.
Notification emails to me and confirmation emails to you are sent through Resend. Those emails include the name and email address you submitted, and the content of the message where needed.
Resend’s privacy policy: resend.com/legal/privacy-policy.
Some Insight posts may embed a YouTube player. If a post contains a video, YouTube / Google may set cookies and collect data when that page loads, even if you do not press play. Their privacy policy: policies.google.com/privacy.
If you are in the European Economic Area or another place with similar rights, you can ask me to:
Email [email protected]. I will respond within 30 days. You can also lodge a complaint with your national data protection authority.
This website does not use Google Analytics, Meta Pixel, or any advertising or behavioral-tracking tool. Nobody’s browsing is profiled or sold. The only measurement is the simple article view counter described above.
This website is a professional portfolio and technical blog. It is not directed at children under 16, and I do not knowingly collect their personal data.
If this policy changes, the “Last updated” date at the top will change. If a change is material, I will describe it on this page. Please check back if you want to stay current.
Mohamed GALY
Europe
[email protected]
Terms of Service