I do not collect personal data through this site. It has no accounts, forms, comments, analytics, advertising, tracking or third-party scripts, and it sets no cookies. This policy covers the little that is processed anyway. It is written to meet Singapore’s Personal Data Protection Act 2012 (PDPA) and the EU and UK General Data Protection Regulation (GDPR).
Who is responsible
Justin Alick runs justinalick.com and is the controller of any personal data described here. I act as my own data protection officer. For any privacy question or request, email me.
When you visit
The site is hosted by Cloudflare. To deliver pages and protect the site from abuse, Cloudflare processes technical data about each request: your IP address, browser user agent, the page requested and the time. If a page fails to load, your browser may also send Cloudflare a network error report. Cloudflare keeps this data under its own retention limits. I do not keep request logs, I do not run analytics, and the only traffic figures I can see are Cloudflare’s aggregate counts.
GDPR legal basis: legitimate interests (Art. 6(1)(f)) in running a secure website. Under the PDPA, you consent to this by visiting.
Cookies and local storage
The site sets no cookies. If you use the theme toggle, your browser saves your choice (night or paper) in its local storage. It stays on your device and is never sent to me. Cloudflare may set a strictly necessary security cookie only if it has to check traffic that looks automated.
When you email me
I receive what you send: your address, name and message. I use it only to reply, and delete it when the conversation is finished unless I need it for a legal reason. GDPR legal basis: legitimate interests (Art. 6(1)(f)), or steps you asked for before an agreement (Art. 6(1)(b)). Under the PDPA, you consent by writing to me.
I do not sell or share personal data, use it for advertising, or make automated decisions about you.
Who else handles data
- Cloudflare, Inc. (United States) hosts and delivers the site. It is certified under the EU-US Data Privacy Framework and its UK extension.
- Proton AG (Switzerland) hosts my email. Switzerland has an EU adequacy decision.
Both act as processors under their data processing terms, which provide the safeguards that the PDPA’s transfer limitation obligation and GDPR Chapter V require. Links to other sites, such as X, Telegram or GitHub, are covered by those sites’ own policies.
Your rights
You can ask me to give you a copy of any personal data I hold about you, correct it, delete it, stop or limit using it, send it to you in a portable format, or stop relying on your consent. Email me. I may need to confirm your identity, and I will reply within 30 days.
If you are unhappy with my answer, you can complain to Singapore’s Personal Data Protection Commission or to your local data protection authority in the EU or UK.
Security
The site is served only over HTTPS. If a data breach is likely to cause significant harm, I will notify the people affected and the relevant authority, as the PDPA and GDPR require.
Changes
If this policy changes, the new version will be posted here with a new date at the top.