Privacy notice
Privacy
This notice explains what is processed when you browse the site, request a consultation, create a reader account, or join the moderated community.
Last updated: 26 July 2026
Who is responsible
Ibrahim Hasan is responsible for ibrahimhasan.net. For privacy questions or rights requests, email [email protected].
What we process
We use only the data needed for the feature you choose. The applicable basis may be a requested service, site security and legitimate interests where available, a legal obligation, or consent for optional analytics.
- Browsing and security
-
- Data
- IP address, browser information, session and CSRF data.
- Purpose
- Run the site, prevent abuse, and diagnose faults.
- Retention
- Session data follows the configured session lifetime; operational records follow applicable controls.
- Reader account
-
- Data
- Name, email, securely hashed password, locale, verification, Terms acceptance, and saved reading activity.
- Purpose
- Create and secure the account and provide reader features.
- Retention
- Until account deletion, unless a longer period is required for security, disputes, or law.
- Community
-
- Data
- Comments, replies, appreciation, bookmarks, and private moderation reports.
- Purpose
- Moderate discussion and provide the reader community.
- Retention
- Private and non-public contributions are deleted with the account. Approved comments may remain anonymised; resolved reports are eligible for deletion after 365 days.
- Consultation request
-
- Data
- Name, email, optional company and role, selected service, challenge details, optional timing, locale, an opaque request reference shown after submission, and follow-up notes. The anti-duplicate submission token is stored only as a hash.
- Purpose
- Respond to the request, keep follow-up tied to the right request, and prevent duplicate submissions.
- Retention
- Active requests are kept while they need a response. Archived requests are eligible for deletion after 365 days.
- Optional analytics
-
- Data
- Approved page and interaction categories; locale, page type and route key; an approved content, service, or topic key where relevant; UI location, destination category, contact channel, a controlled error category; and browser, device, and approximate-location information. Site analytics events do not include form content, names, emails, company, role, challenge, timing, request reference, comment text, raw URLs, query strings, or IP addresses.
- Purpose
- Understand the public experience and decide what to improve.
- Retention
- Only after consent. The consent record remains in your browser for up to 180 days; Google Analytics data follows the configured property retention setting.
Providers, transfers, and updates
We use providers for hosting, storage, security, and transactional email. Google receives analytics data only after you allow it, and private Athar pages never initialise analytics. Providers may process data outside your country; contact us for current provider and transfer information. We update this notice when the site or its processing changes.
Your choices and rights
You can update or delete a reader account in account settings and change analytics through Cookie preferences at any time. Withdrawing consent stops future site-initiated analytics and removes Google Analytics cookies that this site can access.
Depending on the law that applies, you may request access, correction, deletion, restriction, objection, portability, or information about recipients and transfers. Where the GDPR applies, you may withdraw consent and complain to the relevant supervisory authority. Email [email protected]; we respond within the period required by applicable law.