Privacy Policy
I believe privacy is an engineering requirement, not an afterthought. This policy provides complete transparency into how data is collected, stored, and protected across aiwithab.site.
Zero Ad Trackers
No Google Ads, Meta Pixel, or commercial tracking beacons are loaded on this website.
Cryptographic Security
Admin sessions utilize HMAC-SHA256 signatures with timing-safe validation.
Data Minimization
Contact messages are stored securely in Supabase and accessed exclusively to reply.
GDPR & CCPA Rights
You have the right to inspect, export, or permanently erase your data upon request.
Live Cookie Inspector & Consent Controls
You can interactively fetch, inspect, and toggle all cookies currently registered in your browser below:
Live Cookie Inspector & Fetcher
Inspect real cookies currently held in your browser or HTTP headers
No active browser cookies detected
This site strictly minimizes cookie usage. No advertising or commercial tracking cookies are present.
Your Cookie Consent Preferences
Essential for cryptographic admin auth, CSRF defenses, and consent tracking. Cannot be disabled.
Stores UI dark/light mode preference and 24-hour project upvote deduplication tokens.
Anonymous pageview counting. Zero Google/Meta advertising trackers or personal fingerprinting.
Data Controller & Contact Information
The data controller for this website is Abdul Nabi, based in Karachi, Sindh, Pakistan.
If you have questions about this privacy statement, wish to exercise your data rights, or want any submitted contact data deleted from the database, please contact me directly:
Email: abdulnabi.khaskhely@gmail.com
Domain: https://www.aiwithab.site
Location: Karachi, Sindh, Pakistan
Information We Collect
We adhere to strict data minimization. Depending on your interactions with the site, we may collect:
- Contact Inquiries: When you submit a message via the contact form, we receive your name, email address, message body, and timestamp. This data is stored securely in our Supabase PostgreSQL database to facilitate direct replies.
- Anonymous Telemetry: We collect aggregate, non-identifying page visits and primary button click counts (e.g. "View Case Study" clicks). This telemetry does not track your IP address, browser fingerprint, or geographic identity.
- AI Chatbot Conversations: Queries submitted to the on-site AI Assistant are processed ephemerally to generate real-time answers about projects and experience. Conversations are not linked to your identity or sold.
- Local Browser Storage & Cookies: Visual theme preference (Dark/Light) and project upvote deduplication tokens stored locally in your browser.
Third-Party Service Processors
This site integrates with verified, enterprise-grade cloud infrastructure providers to deliver high availability and security:
Provides global CDN delivery and serverless execution. Processes standard HTTP request logs.
Vercel Privacy PolicyHosts project data, blog articles, and encrypted contact submissions with Row Level Security (RLS).
Supabase Privacy PolicyAuthoritative DNS management, SSL encryption, and malicious bot mitigation.
Cloudflare Privacy PolicyPowers conversational responses for the portfolio chatbot and mini project demonstrations.
OpenAI Privacy PolicyData Security & Cryptographic Protection
As an engineer specializing in Application Security (AppSec), defense-in-depth principles are applied across the entire site architecture:
- Row Level Security (RLS): All Supabase database tables enforce RLS policies preventing unauthorized reads or data injection.
- Timing-Safe Cryptography: Administrative authentication cookies are verified using HMAC-SHA256 signatures with constant-time string comparisons (
crypto.timingSafeEqual). - End-to-End TLS: All traffic is encrypted in transit using TLS 1.3 with automated HSTS header enforcement.
- Input Sanitization: Form inputs are strictly validated server-side to prevent Cross-Site Scripting (XSS) and SQL injection.
Your Rights (GDPR & CCPA)
Regardless of your geographic location, you are granted complete autonomy over your personal information:
To submit an erasure or access request, email abdulnabi.khaskhely@gmail.com. All verified requests are executed within 48 hours.
Changes to This Policy
As new engineering case studies, developer tools, and features are introduced to this portfolio, this policy may be updated. Changes will be reflected with an updated "Last Modified" timestamp at the top of this document.