Updated 27 October 2026. Muhammad Ali Anjum, Turin, Italy, is the data controller for this portfolio. For questions or privacy requests, email m.alianjum0@gmail.com.
Website statistics
Cloudflare Web Analytics is enabled to understand aggregate readership and improve this website’s performance. It measures page views, referring websites, browser and device categories, approximate country and page performance. Cloudflare describes this service as operating without analytics cookies, local-storage identifiers or visitor fingerprinting. Google Analytics and Google analytics tags remain disabled.
This portfolio does not send assistant messages, contact information or booking details as analytics events. Web Analytics does not log query strings. Page URLs can appear in readership statistics, so please do not put personal or confidential information in URLs. See Cloudflare Web Analytics and Cloudflare’s privacy policy.
No analytics consent popup is displayed. The Italian Garante’s guidance allows certain analytics to operate without prior consent when limited to aggregate statistics, with appropriate data minimisation and restrictions on combining or sharing data. This site uses Web Analytics for aggregate site measurement, without advertising profiles or cross-site visitor tracking. Where this involves personal data, the purpose and legitimate interest are understanding and improving this site (Article 6(1)(f) GDPR).
This site also keeps daily aggregate counts of booking-link clicks, Google Calendar link openings and case-study views. These counters store only the event name, public page path, UTC day and total count, without visitor identifiers, IP addresses, referrers, query strings, contact details or assistant messages. Do Not Track and Global Privacy Control signals disable these counters. Opening a booking link does not count as a confirmed appointment.
Contact information
There is no on-site project-intake form. If you choose to email Ali, your email address, name and message are processed through email to respond and manage the conversation.
Processing necessary to respond to a request about working together is based on steps taken at your request before entering a contract (Article 6(1)(b) GDPR). Other correspondence is handled on the basis of the legitimate interest in responding to enquiries (Article 6(1)(f)). Please leave out passwords, API keys and confidential client information.
Google Calendar booking
The calendar is not embedded. Choosing a booking link opens Google Calendar on Google’s website, where its privacy and cookie settings apply. Google processes the booking information you provide, such as your name, email address, selected time and appointment details; Ali receives the information needed to arrange and attend the meeting. Booking administration is based on your request to discuss working together (Article 6(1)(b) GDPR).
Complete your booking on Google Calendar to confirm the appointment. See Google’s privacy policy.
Hosting and security
Cloudflare hosts this site. Hosting and security services process request information, which can include IP addresses, requested URLs, timestamps, browser information and diagnostic or security events, to deliver the site, investigate errors and prevent abuse. The legal basis is the legitimate interest in operating a reliable, secure website (Article 6(1)(f) GDPR). This processing is separate from Web Analytics.
Cloudflare may set the __cf_bm cookie for bot protection. It expires after 30 minutes of inactivity and is not an analytics cookie. See Cloudflare’s cookie documentation.
Browser storage and services
Previous analytics choices are removed from local storage. Existing Google Analytics cookies accessible to this site are expired. Assistant conversation, voice preferences, audio replay and dismissal settings use session storage to provide the functionality you request; they are not used for advertising or cross-site tracking.
Ask Ali is an AI assistant, not Ali. Messages and recent conversation context are sent to OpenAI to generate replies. This site does not save assistant conversations to a site database; browser session storage and provider processing are described below. Reply text is sent to Cartesia when Voice on is selected or you choose to replay a reply. Microphone access is requested only after you choose to speak; transcription is handled by your browser and may use its speech service. Voice questions are sent directly to OpenAI automatically when recording ends, without a separate review or Send action. Recording ends after a short pause, when speech recognition ends, when you stop recording or when the recording time limit is reached. These optional services are used to fulfil your request (legitimate interest under Article 6(1)(f) GDPR); microphone permission controls access to your device.
Service providers may process data outside the European Economic Area. Their policies describe processing locations and applicable transfer safeguards; contact Ali for information about safeguards relevant to your data. See the privacy policies for OpenAI, Cartesia, Google and Cloudflare, linked above.
Retention
- Analytics: First-party daily counters are stored without a configured automatic expiry. Cloudflare makes Web Analytics reports available for the previous six months. Provider retention follows the applicable service policies and settings.
- Assistant and browser storage: conversation history, voice preferences and cached reply audio remain for this tab’s browser session. New conversation clears the transcript and reply-audio cache. Browser session restoration may preserve session storage.
- Contact and appointment details: If you email or book through Google Calendar, those services retain correspondence and appointment records under their policies and account settings. Ali’s copies are retained as needed to handle the enquiry, meeting, necessary follow-up or resulting working relationship, and any applicable legal obligations or legal claims. You can request deletion at the email above.
- Hosting and security: log retention depends on the service, configured logging settings and any incident investigation. Cloudflare’s __cf_bm cookie expires after 30 minutes of inactivity. Provider-side retention for AI, voice and infrastructure processing follows the applicable service policies and settings, separately from browser storage.
Your GDPR rights
Subject to the GDPR’s conditions, you can request access, correction or deletion of your personal data, restriction of processing, and data portability. You can object to processing based on legitimate interests, including site measurement. Where processing relies on consent, you can withdraw consent at any time without affecting earlier lawful processing. Email m.alianjum0@gmail.com to exercise these rights; please identify the information or interaction concerned. Requests are normally answered within one month; if an extension is permitted, you will be told why.
You may lodge a complaint with the Italian data protection authority or another competent supervisory authority. The assistant does not make decisions with legal or similarly significant effects about you.