Privacy notice

Who is responsible

This site belongs to Erik Prayoga, Surabaya, Indonesia. I'm the data controller for anything you send through it. Contact: eprayoga17@gmail.com.

What I collect, and why

Only what you type into the contact form:

• your name, email, and (if you add it) company
• what your message is about, and the message itself
• a one-way, keyed hash of your IP address, used only to block spam floods. It can't be turned back into your IP.

I use this to reply to you, nothing else. The legal basis is your consent, which you give with the checkbox on the form.

What I don't do

• No analytics, advertising or tracking cookies.
• No selling or sharing your data for marketing.
• No newsletter sign-ups unless you ask for one.

The only cookies here are login cookies for the admin area, which visitors never get.

Where it's stored

Messages are stored with Supabase (database) and the site runs on Vercel. Their servers may be outside Indonesia, for example in Singapore. Both encrypt data in transit and at rest and are bound by data processing terms. By sending the form you agree to this transfer.

How long I keep it

Messages are deleted automatically 12 months after you send them. If we end up working together, I may keep our correspondence in my email for as long as the project needs it.

Your rights

Under UU PDP you can ask to see the data I hold about you, correct it, delete it, or withdraw your consent at any time. Email me and I'll handle it promptly. Withdrawing consent doesn't affect anything done before you withdrew it.

If something goes wrong

If there's ever a breach that affects your data, I'll tell you and the relevant authority in writing, within the time the law requires, including what happened and what I'm doing about it.