// privacy policy

last updated: march 2026 · ishraqahmed.com

1. Who We Are

This website (ishraqahmed.com) is a personal platform operated by Ishraq Ahmed — a blog, music journal, and creative space. It is not a commercial service.

2. What Data We Collect

We collect minimal data. Here is what may be processed:

  • Server logs: Your IP address and browser user-agent are logged automatically by the web server for security and uptime monitoring. Logs are retained for up to 30 days.
  • Session cookies: A temporary session cookie (PHPSESSID) is set when you visit. It expires when you close your browser and contains no personal data — only a random session identifier.
  • No account registration: This site does not offer public user accounts. No email addresses, names, or passwords are collected from visitors.
  • No public form submissions: There are no public-facing forms that collect personal information. The activity feed is managed solely by the site operator.

3. Third-Party Services

The following third-party services may be loaded when you use certain features:

  • Google Fonts: Fonts are loaded from fonts.googleapis.com / fonts.gstatic.com. Google may log the request. See Google Privacy Policy.
  • jsDelivr CDN: Icons (Material Design Icons) and scripts are loaded from cdn.jsdelivr.net. jsDelivr may log requests. See jsDelivr Privacy Policy.
  • YouTube: Music pages may embed YouTube video players. If you interact with an embedded YouTube player, YouTube (Google) may set cookies and collect data per their own policies. See Google Privacy Policy.
  • SoundCloud: Music pages may embed SoundCloud audio players. Interaction with SoundCloud widgets is subject to SoundCloud's Privacy Policy.
  • Musixmatch: Song lyric data is fetched from the Musixmatch API (server-side). Your browser does not make direct requests to Musixmatch. See Musixmatch Privacy Policy.
  • Hetzner: This site is hosted on a Hetzner VPS. Hetzner's infrastructure processes incoming requests. See Hetzner Privacy Policy.

No advertising networks, analytics scripts (e.g. Google Analytics), tracking pixels, or social media login buttons are used on this site.

4. How We Use Data

  • Server logs are used for security monitoring and diagnosing technical issues only.
  • Session cookies are used solely to maintain your browser session.
  • No data is sold, rented, or shared with third parties for marketing purposes.

5. Your Rights (GDPR / UK GDPR)

If you are located in the EEA or UK, you have the right to access, rectify, erase, or restrict processing of any personal data held about you, and to lodge a complaint with your national supervisory authority.

Because this site collects virtually no personal data beyond transient server logs, most requests will have limited practical scope. To make a data request, contact me via the details on this site.

6. Data Retention

Server logs: up to 30 days. PHP session data: expires when you close your browser. No other visitor data is retained.

7. Security

All connections use HTTPS (TLS). HTTP requests are automatically redirected to HTTPS. Security headers including Content-Security-Policy, X-Frame-Options, and X-Content-Type-Options are set on all responses.

8. Changes to This Policy

This policy may be updated from time to time. The "last updated" date at the top reflects the most recent revision. Continued use of the site after an update constitutes acceptance of the revised policy.

terms of service cookie policy ← home