Privacy.

Retention

Contact form submissions arrive as email and are retained for up to 12 months for follow-up and business record purposes, then deleted unless a longer retention period is required by law or an active business relationship. The website itself does not save your message. To limit repeated sends, the server keeps a scrambled (hashed) form of your IP address with a count. Each record stops counting after an hour, and old records are cleared the next time someone uses the form. My host also keeps standard server logs, like IP address, browser and pages requested, for security.

Booking a conversation

The "Book a first conversation" button opens Cal.com, a separate scheduling service, in a new tab. Cal.com collects your booking details, like your name, email and notes, and passes what I need for our call to me. Cal.com handles them under its own privacy policy, and you can contact me about them too.

Self-check

The self-check scores your answers in your browser. Nothing is sent unless you press Send my answers. If you do, I receive your answers, score, email, name if given, and note as an email, the same way as the contact form. I use them only to reply to you and keep them for up to 12 months. I won't add you to a mailing list or share them for marketing.

Third-party services

These services help run the site. Hostinger hosts it and runs my email (Titan Mail), and form messages also go to my Gmail and Yahoo inboxes, so Google and Yahoo store them too. The fonts are hosted on this site, so loading a page sends nothing to Google. Google Analytics runs only if you accept. Cal.com handles booking if you choose to book. I may use an AI assistant to help me read and reply to messages.

Analytics and cookies

I use Google Analytics 4 to see which pages get read, so I can make the site better. It loads only after you choose Accept in the analytics banner. Before that, no requests go to Google Analytics or Google Tag Manager, and no analytics cookies are kept. Accept and Reject each take one click. The site works either way.

If you accept, analytics data may include pages visited, device and browser information, approximate location, and referral source. Query strings and fragments are removed from the page and referrer addresses sent by this site. Google signals and advertising personalization are disabled in the site's analytics configuration. The site does not use session recording, chat widgets, or advertising pixels.

Google Analytics keeps user and event data for 14 months, and a new visit restarts that clock. Google's standard summary reports are kept separately.

After Accept, Google Analytics can set two first-party cookies: _ga and _ga_HVB3R6KZL1. They identify visits from the same browser and are configured to last up to 400 days. Your analytics choice expires sooner, after 12 months, when I ask again.

Open Cookie settings in any page's footer to change your choice. Choosing Reject stops analytics collection in that browser and clears these analytics cookies for this site's domain and parent domain variants. It does not delete data already sent to Google. You can also block Google Analytics across websites with the Google Analytics opt-out browser add-on.

I honor your browser's Global Privacy Control signal as Reject, even if you previously accepted. Analytics stays off and the banner stays hidden. Cookie settings still opens an explanation of the browser signal. The separate Do Not Track signal does not change the choice.

Google receives visit information only if you accept analytics. Google may collect information about activity across other sites and services under Google's privacy policy. This site's analytics setup turns off Google signals and ad personalization.

A strictly necessary first-party localStorage record, bc_analytics_consent_v1, saves only your Accept or Reject choice and its date. It is used to remember that choice for 12 months and is not sent to Google. If your browser blocks storage, the choice applies to the current page and I ask again on a later visit.

The site also keeps two short-lived entries in your browser's session storage so you land back in the same spot after opening a case study. They never leave your browser and clear when you close the tab.

No sale or marketing sharing

I do not sell your personal information or share it for advertising.

Form security

Form submissions are encrypted in transit when the website is accessed over HTTPS. Submissions are spam-filtered server-side through validation, a honeypot field, origin checks, and rate limiting.

Your contact method

To ask a privacy question or request access, correction, or deletion of information submitted through the form, email baraa@baraachalar.com.

California privacy requests

California residents may have rights to request access to, correction of, or deletion of personal information collected through this website, subject to applicable exceptions. Send requests to baraa@baraachalar.com.

Changes

When this policy changes, the date at the top changes with it. Material changes are noted here.