Your privacy.

This website is run by me, Tanmoy Biswas, from Dhaka, Bangladesh. For anything about privacy, write to hello@tanmoybiswas.me.

Here is everything the site collects just because you opened it:

• Server logs. Like every website, the server records each request: your IP address, the date and time, the page asked for, the response, the page you came from, and your browser and device type. I use this only to keep the site secure and working, and the logs are deleted after 14 days.
• Anonymous statistics. I use Cloudflare Web Analytics to see how many people visit and how fast the site loads. It uses no cookies or local storage, does not follow you across other sites and does not build a profile of you. It reports things like pages viewed, country, device type and the site you came from.
• Delivery and security. The site is delivered through Cloudflare, which handles your IP address to serve pages quickly and block abuse. In rare cases, for example when it needs to check that you are not a bot, Cloudflare may set a short-lived security cookie.
• One note on your device. The intro animation remembers that it has already played by saving a single entry (called tb-pre) in your browser's session storage. It stays in your browser, holds no personal information and disappears when you close the tab.

For now the assistant on this site answers from a set of pre-written replies. What you type there stays in your browser: it is not sent to me or to any AI service.

If I connect it to a live AI model later, I will update this page before it goes live and say exactly what is sent and who processes it.

If you email me, message me on WhatsApp or reach out through a social profile, I receive what you choose to share: your name, contact details, your message and any files. I use it to reply, to prepare a proposal or quote and, if we start a project, to deliver the work.

I keep it for as long as it is useful for that relationship and for ordinary business and legal records, and I delete it when you ask, unless the law says I must keep it.

The brief builder on the contact page only prepares a message inside your browser. Nothing you type there is sent to this website. When you press a send button, your own email app or WhatsApp opens with the brief filled in, and from then on it is handled as an ordinary email or WhatsApp message as described here.

Those messages pass through other services that have their own privacy policies: my email is hosted by Namecheap and WhatsApp is provided by Meta.

I don't sell your personal data or share it for advertising. The only others who handle it are the services that make this site and my communication work, and only as needed for that:

• Cloudflare: delivery, security and anonymous statistics.
• Hostinger: the server the site runs on, located in Kuala Lumpur, Malaysia.
• Namecheap: email hosting.
• Meta: WhatsApp, if you choose to message me there.

Because the site is delivered worldwide, your data can be processed in countries other than your own. I choose providers that publish their own data-protection commitments. I may also disclose information if the law requires it.

This site links to my companies, my clients' websites and my social profiles. Those sites have their own privacy policies and I am not responsible for what they do.

Depending on where you live (for example the EU, the UK or California) you may have the right to ask what personal data I hold about you, to have it corrected or deleted, to object to or restrict how I use it, to receive a copy of it and to withdraw consent where I rely on it.

To use any of these rights, email hello@tanmoybiswas.me. I will reply within 30 days. You can also complain to your local data-protection authority.

Where European or UK law applies, my legal bases are my legitimate interests in running and securing this site and answering enquiries, and, when you ask me for a quote or work, steps taken at your request before a contract. I do not sell or share personal information for cross-context behavioural advertising, as California law defines it.

The site is served over HTTPS, and the server is kept up to date with access restricted. No system is perfectly secure, but I take reasonable care to protect what I hold.

This site is for business visitors and is not directed at children. I do not knowingly collect information from children.

If I change how this site handles data, I will update this page and the date at the top.