Privacy Policy
This site is the personal portfolio and technical blog of Khaled Md Tuhidul Hossain ("I", "me"). This policy explains what data the site collects, why, and what you can do about it. It applies to tuhidulhossain.com and every page beneath it, including the blog.
The short version
I do not sell your data, I do not run user accounts, and I do not ask you to log in. The site collects anonymous usage statistics, and only after you agree to them. If you decline, no analytics or advertising cookies are set.
Who is responsible
The data controller is Khaled Md Tuhidul Hossain. You can reach me at [email protected] for any question about this policy or about data the site holds on you.
What the site collects
Information you give me
Only what you choose to send. There is no contact form and no newsletter — the contact section links to my email address and social profiles. If you email me, I keep that correspondence in my mailbox for as long as it is useful, and I do not add you to any list.
Information collected automatically
With your consent, the site uses two analytics services to understand which articles people read:
- Google Analytics 4 — page views, approximate location derived from IP, device and browser type, and referring site. Google is the processor; see the Google Privacy Policy.
- PostHog — page views and anonymous product analytics. Automatic capture of clicks and form input is switched off; the site records page views and a small number of explicit events such as "a navigation link was clicked". See the PostHog Privacy Policy.
Neither service receives your name, email address, or any identifier you have not volunteered. My hosting provider, Cloudflare Pages, also keeps standard server logs (IP address, timestamp, requested URL) for security and abuse prevention; that happens at the network layer and cannot be switched off by consent.
Cookies and local storage
A cookie banner appears on your first visit. Nothing beyond the strictly necessary is stored until you choose.
- Strictly necessary — your consent choice itself, and your light/dark theme preference. Both live in your browser's local storage, are never sent anywhere, and are the only things stored if you decline.
- Analytics — set by Google Analytics and PostHog only after you accept. Declining prevents these scripts from loading at all, rather than merely hiding them.
- Advertising — blog pages display ads served by Google AdSense, and the ad script is loaded only after you accept. The resume homepage and these legal pages carry no ads. Google and its partners use cookies to serve ads based on your prior visits to this and other sites. Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website. You can opt out of personalised advertising in Google Ads Settings, or opt out of third-party vendors at aboutads.info.
You can change your mind at any time using the "Cookies" link at the foot of the sidebar, or by clearing site data in your browser.
Why I am allowed to process this
Under the GDPR, analytics and advertising rely on your consent (Article 6(1)(a)), which you give through the banner and can withdraw at any time. Server logs rely on legitimate interest (Article 6(1)(f)) in keeping the site available and secure.
Where your data goes
Google and PostHog may process data outside the European Economic Area, including in the United States, under the standard contractual clauses and the EU–US Data Privacy Framework. I do not transfer data to anyone else, and I do not sell or rent it.
How long it is kept
Analytics data is retained according to each provider's default schedule — currently 14 months for Google Analytics. Server logs are short-lived and managed by Cloudflare. Email correspondence is kept until it is no longer relevant.
Your rights
If you are in the EEA or UK you have the right to access, correct, or erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. Because the site stores no account and no direct identifiers, the practical route for most requests is to withdraw consent and clear your browser storage — but if you want me to ask a provider to delete data associated with you, email [email protected] and I will do it. You also have the right to complain to your local data protection authority.
Children
This site is aimed at working software engineers and is not directed at children under 16. I do not knowingly collect data from them.
External links
Articles link out to documentation, source repositories, and other people's writing. Those sites have their own privacy policies, and this one does not cover them.
Changes
If this policy changes materially, the date at the top of the page changes with it. Continuing to use the site after that means you accept the revised policy.
See also the Terms of Use and the Disclaimer.