Written in plain words, by the one person who runs this site. Last updated October 2026.
This site does not use analytics, advertising pixels, or session recorders.
If you use the contact form, your name, email address, and message are stored so Sampath can reply. If email notifications are configured, the form contents are also sent through Resend.
The contact form sends your name, email and message to the site's server. The details are stored with Supabase and can be viewed or deleted by the site owner in the admin inbox; the inbox retains the 500 most recent messages. Resend processes the same details to send an email notification when configured.
For abuse prevention, the server uses a one-way hash of the request IP with a secret to enforce a contact-form rate limit; it does not store the raw IP in the rate-limit table. Vercel may separately process standard request logs under its own retention and privacy terms.
Visitors get no cookies at all. None.
There is exactly one cookie on this site and you'll never receive it: after the owner signs in to the admin area, a session cookie keeps that login alive for seven days. It's httpOnly, so nothing else can read it.
Fonts load from Google Fonts. When your browser fetches them, Google sees your IP address and processes it under Google's own privacy policy — that's the one external request this page makes.
The site is hosted by Vercel. Portfolio data and uploaded images are stored with Supabase; contact notifications are processed by Resend when configured. These providers process information under their own terms and privacy policies. The site does not embed social feeds or use analytics vendors.
Contact messages remain in the admin inbox until deleted, up to a maximum of the 500 most recent messages. Provider and server logs follow the respective providers' retention policies. No contact information is used to build an advertising profile.
You can ask what I hold about you, have it corrected or deleted, or object to it being kept. Email me and I'll take care of it — no forms, no runaround.
Requests are handled by the site owner, subject to applicable law.
This site isn't aimed at children under 13, and I don't knowingly collect their information. If you're a parent and think a child has sent me something through the contact form, email me and I'll delete it.
If this policy ever changes, the updated version appears on this page with a new date at the bottom. No emails about it — you're reading the source of truth right here.
Questions about any of this — or a request about your data — go to sampathlox@gmail.com. A real person reads it.
TL;DR — nothing creepy happens here.