Privacy notice for hejrani.com
This site is a personal portfolio. It sets no cookies, runs no tracking or analytics, and loads nothing from third parties. The only personal data involved is what any web server sees when a page is requested, and whatever you choose to send me by email.
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is the person named above. For any question about your data, or to exercise any of the rights listed below, write to the email address above.
This notice covers hejrani.com and the project pages on its subdomains (for example fractal.hejrani.com), which are run by the same person on the same hosting.
The site is hosted and delivered by Cloudflare (Cloudflare Pages and its content delivery network), provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
When you open a page, your browser sends technical data that Cloudflare has to process to deliver the page and to protect the site against attacks and abuse. This typically includes:
Legal basis: Art. 6(1)(f) GDPR. My legitimate interest is delivering the site reliably and securely. I do not use this data to identify visitors, and I do not combine it with any other data.
Cloudflare processes this data on my behalf under its data processing addendum (Art. 28 GDPR) and deletes it in line with its own retention periods. Data may be processed in the USA. Cloudflare, Inc. is certified under the EU–U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR); Cloudflare additionally relies on the EU standard contractual clauses. If Cloudflare’s security systems challenge a request as suspicious, Cloudflare may set a strictly necessary security cookie to record that the challenge was passed; it is not used for tracking. Details: cloudflare.com/privacypolicy.
The typefaces used here (Archivo, IBM Plex Sans, IBM Plex Mono and, on one project page, Newsreader) are stored on this site and delivered together with the pages. Your browser does not connect to Google Fonts or any other font service, so no data is passed to a font provider.
If you email me, I process your email address, your name if you give it, the content of your message and any attachments, solely to read and answer your request.
Legal basis: Art. 6(1)(b) GDPR where your message relates to a contract or to steps before entering into one (for example a job opportunity); otherwise Art. 6(1)(f) GDPR, my legitimate interest in answering messages sent to me.
My mailbox is provided by Google (Gmail), so messages are stored on Google’s servers. I keep correspondence only as long as needed to deal with your request, unless a statutory retention obligation applies.
This site links to other websites, such as LinkedIn and Constructor University. These are plain links: nothing is loaded from those sites until you click one. Once you do, the privacy policy of the site you visit applies.
Under the GDPR you have the following rights regarding personal data about you:
Right to object: where processing is based on Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation. I will then stop processing the data unless there are compelling legitimate grounds that override your interests, or the processing is needed to establish, exercise or defend legal claims.
To exercise any of these rights, email s.hejrani@gmail.com.
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for this site is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin
datenschutz-berlin.de
You may also contact the supervisory authority in the EU member state where you live or work.
This notice is updated when the site changes. Last updated: 17 October 2026.