Privacy Policy

1. Introduction

This Privacy Policy explains how nomemmurrakh.com ("the Site"), operated by Khuram, collects, uses, and protects your personal information. By using the Site, you agree to the practices described in this policy. This policy applies to all visitors and signed-in users of the Site.

2. Who We Are

nomemmurrakh.com is the personal blog and portfolio of Khuram, a Senior Mobile Developer based in Hyderabad, Pakistan. The Site is a personal, non-commercial project. For any privacy-related questions, contact: khurrammemon37@yahoo.com.

3. What Data We Collect

• removeName — provided by your Google or GitHub OAuth account at sign-in
• removeEmail address — provided by your OAuth provider; used to identify your account
• removeProfile image URL — provided by your OAuth provider; displayed next to your comments
• removeComments — text content you submit on articles
• removeReactions — like or dislike actions you perform on articles
• removeBookmarks — articles you save for later reading
• removeOAuth provider tokens — stored securely by NextAuth.js to maintain your session; never exposed to the client

4. What We Do NOT Collect

• removePasswords — the Site uses OAuth only; no passwords are ever stored
• removePayment information — the Site does not process payments
• removeLocation data — no GPS or IP-based location tracking
• removeBrowsing history — no cross-site tracking or fingerprinting
• removeAdvertising identifiers — no ad networks or tracking pixels

5. How We Use Your Data

• removeAuthentication — to identify you when you sign in and maintain your session
• removeComments — to display your name and profile image alongside comments you post
• removeReactions — to record and display your like/dislike on articles
• removeBookmarks — to save and retrieve your personal reading list
• removeContact form — your submitted name, email, and message are used solely to respond to your enquiry

6. Third-Party Services

The Site relies on the following third-party services to operate. Each has its own privacy policy which governs their data handling:

• removeGoogle OAuth — used for sign-in. Google Privacy Policy: policies.google.com/privacy
• removeGitHub OAuth — used for sign-in. GitHub Privacy Policy: docs.github.com/en/site-policy/privacy-policies
• removeSupabase — database and file storage provider. Supabase Privacy Policy: supabase.com/privacy
• removeVercel — hosting and deployment platform. Vercel Privacy Policy: vercel.com/legal/privacy-policy

7. Data Storage & Security

Your data is stored on Supabase's PostgreSQL database, hosted on AWS infrastructure. Supabase encrypts data at rest and in transit. The Site uses HTTPS exclusively — all data in transit is encrypted via TLS. OAuth tokens are stored securely using NextAuth.js session management and are never exposed in client-side code or logs.

8. Data Retention

Your account data (name, email, profile image), comments, reactions, and bookmarks are retained for as long as your account exists. If you request account deletion, all associated data will be permanently removed from the database. Contact khurrammemon37@yahoo.com to request deletion.

9. Your Rights

• removeAccess — you may request a copy of the personal data held about you
• removeCorrection — you may request correction of inaccurate data
• removeDeletion — you may request deletion of your account and all associated data
• removePortability — you may request your data in a machine-readable format
• removeObjection — you may object to processing of your data at any time

10. Cookies

The Site uses a single session cookie set by NextAuth.js to maintain your signed-in state. This cookie is strictly necessary for authentication and is not used for tracking or advertising. No third-party cookies or tracking cookies are set by the Site itself.

11. Children's Privacy

The Site is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided personal data through the Site, please contact khurrammemon37@yahoo.com and the data will be deleted promptly.

12. Changes to This Policy

This Privacy Policy may be updated from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the Site after changes constitutes acceptance of the updated policy.

13. Contact

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: khurrammemon37@yahoo.com