What this site collects, and what happens to it.

The forms

Two pages accept submissions: the contact form and the qualified brief. What you type in them (your name, email, organisation, role, links, and the text of your message or brief) is sent to my API and stored in a private database so I can read it and reply. Brief submissions also trigger an email notification to me and a copy into a private Notion workspace I use to manage engagements. Nothing you submit is published.

Submission requests carry standard technical metadata (your network address and browser identifier). It is used for rate limiting and abuse prevention. Confidential details you flag stay out of application logs.

Analytics

The site runs its own first-party analytics. It records pages viewed, the referring page, browser and connection type, and page performance timings, tied to a random identifier stored in your browser. There are no third-party analytics or advertising trackers, and the data is not shared with anyone.

To opt out, open any page with ?analytics=off appended to the address. That sets a durable opt-out for your browser; ?analytics=on reverses it.

Third-party resources

Pages load fonts from Google Fonts, and the homepage map loads from Mapbox. When your browser fetches those resources, those providers see your network address, as with any resource fetched from the web. No other third-party code runs on the site.

Where the data lives

The site is served from Firebase Hosting, the API runs on Google Cloud, and submissions are stored in MongoDB Atlas. Access is limited to me.

Your choices

Email michael@cengkuru.com to ask what I hold from your submissions or to have it deleted. Submissions are kept only as long as needed to respond and keep a record of the engagement.

Last updated 16 July 2026.