Privacy notice

Abdelrhman Mohamed, a product designer based in Cairo, Egypt, runs this website and decides how your data is used (the “controller”).

Contact for anything privacy-related: hi@theshaaer.com.

What I collect: your name, email address, the optional note you write, the time you chose, your time zone and the site language. I also store a one-way scrambled version of your IP address (a hash that cannot be turned back into the address) so the form can limit spam.

Why: to arrange and hold the call you asked for, send you a confirmation, calendar invite and reminders, and keep the form from being abused. The legal basis is taking steps you requested before a possible agreement, plus my legitimate interest in keeping the form secure.

How long: requests that were declined, cancelled or never answered are deleted 90 days after they were closed. Confirmed calls are deleted 12 months after the call took place. Emails in my own inbox are kept as long as the conversation needs, then deleted on request.

Who handles it: a database service (Turso) stores the booking, an email service (Resend) sends the messages, and I read busy and free times (nothing about you) from my own Google Calendar so I am not double-booked.

I keep what you send and my replies for as long as the conversation needs and for a reasonable time afterwards. Ask me and I delete it.

The first time you visit, a small box asks whether to allow anonymous analytics. Nothing is loaded or stored until you press “Allow”. “No thanks” keeps everything off. Browsers that send “Do Not Track” or Global Privacy Control are never asked and never measured.

What is measured once you allow it:

• which pages are opened (the page path only, never the full address or anything after a “?”), and the language
• that a case study was opened (the name only for public ones), and how far down an article people read
• clicks on links that leave the site, grouped by destination such as LinkedIn or email, and CV downloads
• when the search palette or booking window is opened, and when the theme, language or UX Mode is switched
• which accessibility setting was changed (the name of the setting only, never the value you chose)
• whether the site was installed as an app

What is not measured: your name, email, anything you type into forms, booking details, your location (I ask the provider not to use your IP address for location), or protected case study content. Signed booking links are never reported.

How: an analytics service called Mixpanel receives these events through this website’s own address. A random identifier is stored on your device so repeat visits can be counted; it is not linked to your name. The legal basis is your consent, which you can withdraw at any time: open the accessibility panel and switch “Anonymous analytics” off. Switching it off stops measuring and removes the identifier from your device.

The site is hosted by Vercel. Like every web host, it processes technical request data (such as your IP address and browser) to deliver pages and keep the service secure. I also use Vercel Web Analytics and Speed Insights, which produce aggregated page-view and loading-speed statistics without cookies. The legal basis is my legitimate interest in running, securing and improving the site.

• Your settings (theme, language, text size and other accessibility options, whether you saw the intro): kept in your browser’s local storage so the site remembers them. Needed for the features you use.
• Your analytics choice (“Allow” or “No thanks”): local storage, so I do not ask again.
• Protected case studies: if you enter the password, a cookie that only says you unlocked them, kept for 30 days and not readable by scripts.
• Only if you allow analytics: the random identifier described above.

There are no advertising cookies and no cross-site tracking.

Only the providers that help run the site, each for one job: Vercel (hosting), Turso (booking database), Resend (booking emails), Mixpanel (analytics, only if you allow it) and Google (my own calendar availability). I do not sell or rent personal data.

Some of these providers operate outside your country, including in the European Union and the United States. Where that happens I rely on their data-processing terms and standard contractual safeguards.

Depending on where you live (for example under the GDPR or Egypt’s Personal Data Protection Law, Law No. 151 of 2020) you can ask me to: tell you what I hold about you, correct it, delete it, restrict or stop using it, give you a copy, or stop any use based on consent.

Email hi@theshaaer.com from the address you used. I aim to answer within 30 days. If you are unhappy with my answer you can complain to your local data protection authority, in Egypt the Personal Data Protection Centre.

This site is not aimed at children and I do not knowingly collect their data. If you think a child sent me information, email me and I will delete it.

The site uses HTTPS. Booking approval and cancellation links are signed and expire, and each works once. Access to the booking data and email accounts is limited to me. No system is perfectly secure, but I keep the data I hold small on purpose.

When I change what is collected I update this page and its date. If a change needs your consent, I will ask again before it starts.