1. Who operates this site?
This independent portfolio is operated by Mehedi Hasan at mehedihasan.work. For privacy questions or to request access, correction or deletion of information you submitted, email hello@mehedihasan.work.
2. Information you submit
If you send a project inquiry, the website collects the name, email address, selected project or service category, message and any optional referral or campaign labels submitted with it. If you send a mentorship inquiry, it also includes your selected learning topic, experience level and learning goal. Each accepted inquiry receives a reference and submission time.
Inquiry details are stored in restricted server-side records and used to review your request, reply and maintain necessary records. An email notification containing the inquiry details may also be sent to the site's contact mailbox. Submission does not create a public profile or publish your message.
3. Necessary security technology
Contact and mentorship forms use a short-lived, secure, HttpOnly, SameSite=Strict cookie named __Host-mh-lead to protect requests against cross-site submission. This cookie is normally valid for up to 45 minutes and is cleared after a successfully accepted inquiry. It is necessary for form security and does not require analytics consent.
The site also applies rate limiting to reduce spam and misuse. This uses hashed network-address identifiers and request timing; the operational server may separately record IP addresses, requested URLs, browser information and timestamps in access or error logs for security and troubleshooting.
4. Optional Google Analytics
Google Analytics 4 is optional. Its tag is not loaded until you choose Accept analytics in the on-site notice. If enabled, Google may process page-view and interaction information and use cookies or similar technologies according to its policies. A confirmed inquiry may trigger a general lead event, but the event is not designed to include your name, email, message or inquiry reference.
Your choice is saved in your browser's local storage using mh_ga4_analytics_consent_v1. You can change that choice using Analytics preferences, available on the site, or clear the site's storage in your browser. Rejecting optional analytics does not prevent normal browsing or submitting an inquiry.
5. Google reCAPTCHA for inquiries
When you submit a contact or mentorship inquiry, Google reCAPTCHA v3 may load to help check for abusive or automated submissions. This can send technical and interaction data to Google separately from optional Google Analytics consent, because it protects the inquiry form. See Google's Privacy Policy and Terms of Service.
6. How long information is kept
Site access and error logs are configured for daily rotation with up to 14 retained rotations, subject to server operations. Contact records and related email notifications do not currently have an automatic fixed deletion period. They may be kept for legitimate correspondence, recordkeeping, security or legal needs until no longer necessary. You can request review or deletion at the email address above; some records may need to be retained where required for security or legal reasons.
7. Service providers and external websites
Website hosting and email delivery infrastructure help run this site and process inquiries. Google Analytics (when accepted) and reCAPTCHA (when a form is submitted) are third-party services. Project showcase links, messaging platforms and other external websites have their own privacy practices; this policy does not govern them. No inquiry information is intentionally sold through this portfolio.
8. Security and your choices
The site uses HTTPS, restricted inquiry storage, request validation and other safeguards, but no online service can guarantee absolute security. You can browse without accepting optional analytics, change your analytics choice at any time, choose not to submit forms, and contact the site operator about personal information you have provided. Avoid sending passwords or other highly sensitive account information in inquiry messages.
9. Changes to this policy
This policy may be updated if data practices, services or legal requirements change. Material changes will be reflected on this page with a revised effective date.