Privacy / Data handling

Useful data, kept minimal.

This portfolio collects only what is needed to operate the public assistant, prevent abuse, and respond when you choose to make contact.

Last updated: 24 August 2026

01 / Portfolio assistant

What the assistant records

When you use Yahya'AI, the service may store your question, its answer, response time, model, review flag, and approximate country, region, and city supplied by Cloudflare. These records help monitor reliability, identify abuse, and improve approved answers.

Raw IP addresses, device hostnames, exact GPS locations, raw user-agent strings, credentials, and unhashed network identifiers are not stored. IP addresses are transformed into one-way, daily rotating hashes before storage. Email addresses and phone-like values are removed from logged questions where detected.

Please do not submit confidential, sensitive, or unnecessary personal information to the assistant.

02 / Retention

Conversation records expire after 90 days

Individual AI questions, answers, and website visit events are retained for no longer than 90 days. A daily scheduled cleanup removes expired records, and assistant or dashboard activity applies the same cleanup policy. Short-lived rate-limit counters are removed after one day. Anonymous aggregate totals may be kept longer because they cannot be used to reconstruct a conversation.

03 / Contact

The site sends your message directly

When you submit the contact form, the name, email address, subject, and message you provide are sent to Yahya through the configured delivery provider. The first-party server validates and rate-limits the request first; FormSubmit may receive a browser-side retry only when its server-to-server delivery path is unavailable. The message content is not stored in the portfolio database. Short-lived rate-limit records contain only a one-way identity hash, time window, and request count.

FormSubmit, any configured email-delivery provider, and Yahya's email provider process the delivered message under their own privacy terms. Please do not submit confidential or unnecessary personal information.

04 / Web analytics

First-party activity without advertising profiles

The portfolio records the visited public page, visit time, referrer domain, browser family, device category, approximate country, region, and city supplied by Cloudflare, and a one-way anonymous session code. This makes it possible to understand popular work, traffic sources, and device needs without storing a visitor's name or raw network identity.

Raw IP addresses, full user-agent strings, exact GPS locations, and page query strings are not stored. The site does not use analytics cookies, advertising trackers, fingerprinting, or cross-site user tracking. Contact-form contents and Yahya'AI conversation contents are not included in website visit events.

05 / Service providers

Cloudflare and FormSubmit operate essential services

Cloudflare Pages, Pages Functions, Workers AI, D1, and Web Analytics provide hosting, assistant responses, abuse protection, conversation storage, and site-performance measurement. Cloudflare may process standard network information needed to deliver and secure the site. FormSubmit, or a configured replacement delivery provider, delivers contact-form messages.

The site does not sell personal information and does not use third-party advertising trackers.

06 / Your choices

You can use the portfolio without AI

All main portfolio pages remain available without using the assistant. To ask about a logged conversation or request deletion of information you submitted, email yahyaelsawi1@gmail.com with enough non-sensitive context to identify the request.

This notice may change when the assistant, hosting, or retention policy changes. The updated date above will change with it.