Privacy policy

Last updated: 17 November 2026

This policy explains what neemii.dev, my personal portfolio, does with your data. There are no accounts, no payments and no ads, and I never sell your data.

Who is responsible

The site is run by Muhammad Naeem, a Flutter and mobile app developer based in Lahore, Pakistan. For any privacy question or request, email me at hello@neemii.dev. Wherever this policy says “contact me”, that’s the address to use.

What is collected and why

When you send an inquiry

The contact form asks for your name, your email, your company or project name (optional), the type of project, a budget range (optional), a timeline (optional) and a short project brief. When you press “Send inquiry”, the form goes to FormSubmit (formsubmit.co), a form-forwarding service, which emails it to me. FormSubmit may show you a captcha to check you’re a person. The form also has a hidden field that real people never see; it’s there only to catch spam bots.

I use these details only to reply to you and discuss your project. You can also email me directly or message me on WhatsApp instead.

Analytics

On neemii.dev, the site loads Google Analytics 4 a moment after the page has finished loading. It shows me which pages people look at, roughly where visitors come from and what devices they use, so I can improve the site.

• EU/EEA, UK and Switzerland: I use Google Consent Mode so that analytics storage is set to “denied” for visitors from these regions. That means no analytics cookies are placed on your device. Google may still receive basic, cookieless signals (for example, that a page was viewed), without an identifier that recognises you on a later visit.
• Everywhere else: analytics cookies are allowed, so Google can tell new visits from returning ones.
• Advertising: advertising storage and ad personalisation are always switched off, for everyone.

When someone submits a valid inquiry, the site also sends Google Analytics a “generate_lead” event containing only the project type and budget range you picked. Your name, email, company and message are never sent to Google.

Fonts

The site’s fonts are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). To deliver them, Google receives your IP address and basic browser information, as with any web request.

Hosting

The site is hosted on GitHub Pages. GitHub may log technical details of each request, such as your IP address, for security. I don’t have access to those logs.

Things stored only in your browser

A few small items are saved only in your own browser:

• Your theme choice (light or dark), kept in local storage so it’s remembered next time.
• Whether you’ve seen the intro animation, and whether the assistant’s hint bubble has been shown, kept in session storage and cleared when you close the tab.
• Your chat with the on-site assistant, kept in session storage and cleared when you close the tab. The assistant runs entirely in your browser: your questions are answered on your device and are not sent to me or to any server.

Legal bases

If data protection laws such as the GDPR apply to you, I rely on:

• Taking steps at your request before a possible contract, when I reply to your inquiry.
• Legitimate interests, for keeping the site secure, blocking spam, loading fonts and measuring basic site use.
• Consent, where the law requires it for analytics cookies. That’s why they’re switched off for visitors from the EU/EEA, UK and Switzerland.

Who receives data

• Google (Analytics and Fonts)
• FormSubmit (to deliver your inquiry to my inbox, which is a Gmail account, also provided by Google)
• GitHub (hosting)

These providers may process data in the United States and other countries whose data protection rules differ from yours.

How long data is kept

• Inquiry emails: as long as we’re talking about your project, and no longer than 2 years after our last contact, unless we start working together and I need to keep records.
• Google Analytics: retention of user-level data is set to 14 months.
• Browser storage: session items disappear when you close the tab.

Your rights

You can ask me to:

• tell you what data I hold about you and give you a copy
• correct anything that’s wrong
• delete your data
• stop using your data, or object to how I use it
• withdraw any consent you’ve given, at any time

Just contact me; I’ll reply within a month. If you’re in the EU/EEA or the UK and you’re unhappy with how I’ve handled your data, you can complain to your local data protection authority.

You can also block or delete cookies in your browser, or use Google’s Analytics opt-out add-on.

Children

This site isn’t directed at children under 16, and I don’t knowingly collect their data. If you think a child has sent me their details, contact me and I’ll delete them.

Links to other sites

The site links to the App Store, Google Play, LinkedIn, GitHub, WhatsApp, my social profiles (Instagram, YouTube, TikTok and X) and companies I’ve worked with. Those sites have their own privacy policies.

Changes to this policy

If what the site does changes, I’ll update this page and the “Last updated” date at the top.