Skip to content

Last updated 5 November 2026

Privacy Policy

This website is run by me, Muhammad Ahmad, an individual in Kuala Lumpur, Malaysia. It isn't a company. This page says plainly what the site collects and what happens to it.

How to contact me

Email me@dealwithmuhammad.com or message me on WhatsApp at +60 11-3986 5270.

What I collect, and why

If you use the contact form or the Messages app on the phone: your name, email address, message and the project type you picked. I use them to read your message and reply. If you choose WhatsApp or your own email app instead, the message goes through that app, not through this site.

When you visit: a small script counts visits so I can see which pages people read. It records:

  • the page you opened, without anything after a ? in the address
  • where you came from: the name or address of the site that sent you, or a tag in the link such as ?ref=linkedin
  • the address of a link you click to leave this site, without anything after a ?
  • your country, which my host works out from your IP address
  • your device type, browser and operating system, worked out from what your browser sends

To count one person once a day, the server scrambles your IP address and browser details with a secret value and the date, using a one-way hash, and keeps only the result for up to two days. My code doesn't write your IP address to the database. It does hold IP addresses briefly in the server's memory to limit how many requests one address can make.

The counts are added together and shown publicly on the stats page, where anyone can see them. They aren't tied to a name or an account. The same script runs on my other DWM sites and reports to this site, so the stats page shows their numbers too.

Who handles it

There are no ads on this site. These are the services involved:

  • Vercel hosts the site. Like any web host, it receives each visitor's IP address and browser details and may keep them in its own logs.
  • Upstash holds the visit counts and a copy of contact form messages. The database is in the United States.
  • Google (Gmail) delivers contact form messages to me and holds my email.
  • Namecheap forwards email sent to me@dealwithmuhammad.com.

These companies can run their servers outside Malaysia and outside your own country. Each has its own privacy policy. Links to WhatsApp, LinkedIn, GitHub and other sites take you to those sites, and their policies apply once you're there. Nothing from those sites is embedded here. The fonts are served from this site, not loaded from Google.

I may also share information if the law requires me to.

Cookies and browser storage

My code doesn't set any cookies. Your browser's local storage holds your light or dark theme choice. If you add ?dwm-ignore=1 to any address on this site, it also remembers not to count your visits in that browser (?dwm-ignore=0 undoes it). My host could add a technical cookie of its own as part of its security checks.

How long it's kept

  • Contact messages: the database keeps the latest 500 messages, and older ones drop off as new ones arrive. The copy in my email stays until I delete it. Nothing deletes email automatically.
  • The daily visitor hash: up to two days.
  • Visit counts: there's no automatic deletion, so they stay indefinitely.
  • Host logs: for as long as Vercel keeps them.

You can ask me to delete a message you sent at any time.

Security

The site runs over HTTPS, the database keys are only used on the server, and the contact form has a spam trap and a limit on how many messages one address can send. That's the extent of it: this is a personal site with no security certification or independent audit. Messages aren't end-to-end encrypted, so please don't send passwords or other sensitive details through the form. No online service can promise perfect security. If a breach affected you, I'd tell you and do what the law requires.

Your rights

You can ask me for a copy of the personal data I hold about you, and ask me to correct or delete it. Email me at me@dealwithmuhammad.com. Malaysia's Personal Data Protection Act 2010 applies to how I handle personal data, and if you're in the EU or UK you also have rights under the GDPR, including the right to complain to your data protection authority. The visit counts can't be traced back to one person, so I can't look up or remove one person's share of them.

Children

This site isn't meant for children under 13. If a child under 13 has sent me their details, tell me and I'll delete them.

Changes

If what the site does changes, I'll update this page and the date at the top. See also the Terms of Use.