Privacy
In effect since September 20, 2026. Last updated September 20, 2026.
The contact form and the address abdou@abdou.contact bring me your name, your email and your message.
Summary
- I’m the only person who reads your messages, and I approved this policy.
- Your contact details are used only for this exchange.
- Nobody else receives your information unless the law requires it.
- Leave out sensitive information: health, social insurance number, passwords, banking details.
Person in charge
Person in charge of personal information: Abdoullah Hajji, abdou@abdou.contact
Abdoullah Hajji, final-year student in computer science technology (Techniques de l’informatique), network management track, Sherbrooke, Quebec.
What I receive
Through the form: your name, your email, your message, the page language and the date sent.
By email to abdou@abdou.contact: whatever you choose to write to me.
To limit how many messages can be sent, the server computes a fingerprint of your IP address. It’s an HMAC code, made with a secret key, that changes every day; it’s used only to count submissions.
The same calculation, applied to your email address, counts submissions per address.
Each message is stored with the page language, its dates, its delivery status and the two fingerprints. Your IP address, your browser’s user agent and Cloudflare’s token stay out of the database and out of the form’s logs.
Bot check
On the Contact page, Cloudflare’s Turnstile check loads when you first enter a field in the form.
It reads your IP address, your encrypted connection’s fingerprint (TLS) and your browser’s user agent. Cloudflare uses them to tell me whether a person is sending, and also to improve its own bot detection.
The details are in Cloudflare’s Turnstile privacy addendum. To avoid the check, write to abdou@abdou.contact, which works without it.
A submission the trap field flags as automated is kept 7 days without being delivered, so I can recover a mistake, and the address abdou@abdou.contact always works.
Cookies and browser storage
This site sets no advertising or analytics cookies. Cloudflare, which hosts and protects it, may set security cookies (cf_clearance and sometimes cf_chl_…) if your browser has to pass an anti-bot check, for example during an attack or when you send the form. cf_clearance only records that the check passed and expires after 30 minutes. Cloudflare treats them as strictly necessary.
While you type, the form keeps a draft in your browser, for that tab only (session storage). The draft is cleared when the message goes through or when you close the tab.
abdou.contact pages load one outside script, Turnstile, and only on the Contact page.
How it’s used
Your name, email and message are used to read your request and reply to you. The fingerprints and Cloudflare’s check are used to block bots and floods of messages.
The copy kept in the database lets me find a message again if the email delivery fails or if I delete it by mistake.
Providers and transfers outside Quebec
Two companies process this information on my behalf.
- Cloudflare, Inc. (United States)
- Hosting for abdou.contact, the Turnstile check and the D1 database that holds the copy of messages. Cloudflare also delivers form messages and emails sent to abdou@abdou.contact to my inbox.
- Google LLC (United States)
- The email service that hosts my mailbox, where all these messages arrive.
Like any host, Cloudflare also receives your IP address and your browser’s technical data with every page you open.
This information may therefore be processed and stored outside Quebec, including in the United States.
How long I keep it
| Information | How long |
|---|---|
| Copy in the database (D1) | Deleted 90 days after it arrives. D1’s automatic backups (Time Travel) can keep it for up to 30 more days, then it’s gone. |
| Submissions flagged as automated by the trap field | Deleted after 7 days. |
| Fingerprint of your IP address | Deleted within 48 hours of sending. |
| Fingerprint of your email address | Deleted with the message. |
| Emails in my mailbox | Deleted at most 12 months after the last exchange. If it leads to an internship, a job or a contract, I keep what’s needed for that relationship, then 12 months. |
| Cloudflare Workers technical logs (event and error codes, counters, page language and a request id only) | Deleted after 7 days at most. |
| Activity log of Cloudflare Email Service, the service that routes email to my inbox (the sender, the recipient and the subject of each message, without the content) | Kept 31 days. |
Security
- Every page uses an encrypted connection (HTTPS).
- Stored messages can only be read from my Cloudflare account.
- The form limits submissions per connection, per email address and per 24-hour period.
Your rights
You can ask me, in writing:
- to know what information I hold about you and get a copy, including in a structured, commonly used format;
- to correct inaccurate information;
- to delete your information;
- to withdraw your consent.
Write to abdou@abdou.contact. I answer in writing within 30 days of receiving the request, at no charge.
To check that the request is yours, I reply to the email address concerned.
If you withdraw your consent, I delete your message from the database and from my mailbox. D1’s backups can keep it for up to 30 more days.
Complaints
To complain about how I handle your information, write to abdou@abdou.contact with “Complaint” in the subject line. I answer in writing within 30 days.
You can also contact Quebec’s Commission d’accès à l’information through its online form: formulaire.cai.gouv.qc.ca.
Incidents
If a confidentiality incident happens, I take steps to reduce the risk and record it in a register. If it presents a risk of serious injury, I notify the Commission d’accès à l’information and the people concerned.
Under 14
If you’re under 14, ask a parent or guardian to write to me with you.
Change log
When this policy changes, the date at the top changes too, the change is summarized below, and the Contact page flags it for 30 days.
- September 20, 2026: first version.