Overview & Privacy Principles
Welcome to the official portfolio and engineering journal of Fi Amanillah ("we", "us", or "our", accessible at fi.amanillah.com). We are dedicated to respecting your privacy, upholding global digital sovereignty, and maintaining strict transparency regarding any data shared through our website, consultation systems, developer services, and technical newsletter.
Data Controller Information
Under the European General Data Protection Regulation (GDPR Regulation (EU) 2016/679), UK GDPR, and related privacy frameworks, the designated data controller responsible for your personal data is:
Fi Amanillah
Full-Stack Engineer & System Architect
Information We Collect
Depending on how you interact with our platform, we may collect the following categories of information:
A. Information You Voluntarily Provide
- Newsletter & Updates: When you subscribe to our tech journal, we collect your email address, subscription source, and optional topic preferences.
- Contact & Project Inquiries: When submitting an inquiry via our contact form, we collect your name, email address, message body, timeline estimates, and budget ranges.
- Consultation Bookings: When scheduling a discovery call, we collect your contact name, work email, preferred timezone, and meeting discussion points to formulate calendar invites.
- Developer Accounts & Profiles: When registering an account, we collect your username, hashed credentials, custom profile links, and two-factor authentication (TOTP) metadata.
B. Automatically Collected Technical Data
- System Telemetry & Logs: Standard HTTP server logs including masked IP addresses, browser user-agent strings, referring URLs, request timestamps, and response status codes.
- Security & Bot Prevention Data: Cryptographic challenge tokens generated by Cloudflare Turnstile to prevent spam without tracking browsing habits.
- Performance Metrics: Aggregated Core Web Vitals (LCP, FID, CLS) to monitor frontend rendering efficiency.
Legal Basis for Processing (GDPR Art. 6)
We only process personal data when an explicit legal foundation exists under applicable regulations:
You explicitly opt in to receive our technical newsletter or voluntary notifications. You may revoke consent at any moment via the 1-click unsubscribe mechanism.
Processing contact information and scheduling parameters required to respond to consultation requests or deliver contractual engineering deliverables.
Mitigating denial-of-service (DDoS) attacks, preventing automated credential stuffing, optimizing system speed, and ensuring application security.
Retaining mandatory tax, invoicing, or compliance records where required by applicable statutory laws.
Third-Party Services & Infrastructure
We utilize select infrastructure providers adhering to strict security and privacy standards to operate our website:
Your Rights (GDPR, UK-GDPR & CCPA)
Regardless of your geographic location, we extend full digital privacy rights to all visitors:
Request a machine-readable export of any personal records associated with your email address.
Request immediate correction of inaccurate or outdated profile and contact details.
Request full deletion of your newsletter subscription, contact records, and account data from our live databases.
Opt out of newsletter dispatches at any moment via the Unsubscribe Portal or footer link.
To exercise any statutory privacy right, simply transmit an email to [email protected]. We will fulfill verified requests within 30 days without charge.
Security & Retention Policies
We implement rigorous architectural standards to safeguard personal information:
- Transport Encryption: All client-to-server and server-to-database communications are secured using modern TLS 1.3 encryption protocols.
- Credential Security: Passwords are hashed using salted Argon2id / Bcrypt cryptographic functions; plain-text credentials are never persisted.
- Data Minimization: Unsubscribed email addresses are purged or irreversibly anonymized in compliance with anti-spam compliance guidelines.
- Access Controls: Database credentials and API keys are stored in secure environment vaults with least-privilege access.
International Data Transfers
Because our edge infrastructure is distributed globally through Cloudflare and European cloud providers, your information may be processed across international borders. When data is transferred outside the European Economic Area (EEA), we ensure appropriate transfer mechanisms such as the EU Standard Contractual Clauses (SCCs) are in place.
Children's Privacy
Our services, articles, and software tools are intended for software professionals and adult learners aged 16 and older. We do not knowingly solicit or collect information from children under 16. If we discover that personal information of a minor was inadvertently collected, it will be deleted immediately.
Modifications to this Policy
We may update this Privacy Policy periodically to reflect architectural evolutions, new services, or legal obligations. The "Last Revision" date at the top of this document indicates when the latest changes took effect. We encourage visitors to review this page periodically.
Contact & Data Protection Inquiries
If you have questions, feedback, or formal data protection requests regarding this policy, please reach out directly: