What I do with your data

Who's behind the site

djasha.me is owned and operated by Diaa Asha, an independent UX designer based in Amman, Jordan, working as a sole proprietor. There's no company behind this — just one person and a laptop. You can reach me at [email protected] for anything privacy-related.

What gets collected

Contact messages

The contact page currently points you to email. If you send me a message, your email address and whatever you write land in my inbox. I don't store that message in a site database; it stays in email while the conversation is active and for normal follow-up. If I re-enable a contact form later, it will run through a server-side relay rather than exposing a public form-provider key in the static page.

Analytics

The site uses Google Analytics to understand broad traffic patterns: page views, referrers, approximate geography, device/browser details, and similar aggregate signals. I use it to see what pages are useful and whether the site is working well. I don't use Google advertising features, remarketing, or audience sharing for ads. If you'd rather not be counted, standard ad blockers and Google's browser opt-out tools can block it.

Booking (planned)

I plan to embed a self-hosted cal.diy instance on the contact page so you can book a call without back-and-forth email. If you book a slot, that flow will collect your name, email, the time you picked, and any notes you add. It runs on my own infrastructure, not a third-party SaaS.

Server logs

The web server logs basic request data (timestamp, requested path, response code, user-agent) for a short window so I can debug outages and block abuse. These logs rotate automatically and are not used for analytics or profiling.

What I don't do

• No advertising, no ad networks, no retargeting pixels.
• No selling, renting, or sharing your data with anyone for marketing.
• No Meta Pixel, Hotjar recordings, or advertising trackers.
• No social-login or account system — there's nothing to sign up for.

How long things are kept

• Contact emails: kept while a conversation is active and for up to 24 months after for follow-up, then deleted.
• Analytics: aggregated counts, retained indefinitely; no personally identifiable rows.
• Booking records: kept for up to 12 months after the meeting for follow-up, then deleted.
• Server logs: rotated and discarded within 30 days.

Third parties I rely on

• Google Analytics — measures aggregate site usage for this portfolio. See Google's privacy policy.
• cal.diy (self-hosted, planned) — also on my own server.
• Hosting — the site is served from infrastructure I operate on dedicated servers in the EU.

Your rights

You can ask me, at any time, to:

• Tell you what I have on file for you.
• Correct anything that's wrong.
• Delete it (where I'm not legally required to keep it).
• Stop processing it for any specific purpose.

Email [email protected] and I'll handle it personally. Expect a reply within 14 days.

Children

This site isn't directed at children under 13 (or 16, depending on where you live). If you're a kid or teen, please don't send me your personal info — ask a parent first.

Changes

If I change anything material on this page, I'll bump the "last updated" date at the top. There's no mailing list to notify you because there's no mailing list.