← Back to Home

Privacy Policy

Last updated: September 2026

This Privacy Policy explains how Thariq Hamad ("I", "me") collects, uses, and protects data when you visit thariqhamad.com (the "Site"). I am committed to transparency and to complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL).

1. Data Controller

Thariq Hamad is the data controller for this Site.

Contact: thariqhamad6@gmail.com

2. What Data Is Collected

I do not collect personal data directly. However, this Site uses two third-party analytics services that may collect the following data automatically when you visit:


• Pages visited and navigation paths

• Time spent on pages

• Scroll depth and click interactions

• Approximate geographic location (country/city level)

• Device type, browser, and operating system

• Referring website or source

• Anonymous session recordings and heatmaps (Clarity only)


Blog posts and case studies also include a like/share feature. This stores only an anonymous, aggregate count of likes and shares per page (not linked to your identity) in a database. Whether you personally liked a page is remembered using your browser's local storage, not a cookie – see Section 5 for details.

3. Third-Party Services

Google Analytics 4 (Google LLC)

Purpose: Understand aggregate site traffic and visitor behaviour.

Data retained: 14 months (Google default).

Optout: https://tools.google.com/dlpage/gaoptout

Privacy policy: https://policies.google.com/privacy


Microsoft Clarity (Microsoft Corporation)

Purpose: Session recordings and heatmaps to improve site usability.

Data retained: 90 days (Clarity default).

Optout: https://clarity.microsoft.com/optout

Privacy policy: https://privacy.microsoft.com/privacystatement


Supabase (Supabase Inc.)

Purpose: Stores the anonymous, per-page like and share counters shown on blog posts and case studies. No personal or visitor-level data is collected – only an aggregate count per page.

Data retained: Indefinitely, as an aggregate page-level count not linked to any visitor.

Privacy policy: https://supabase.com/privacy

4. Legal Basis for Processing

Under GDPR (EU/EEA visitors): Processing is based on your freely given consent (Article 6(1)(a)). You may withdraw consent at any time by clicking "Decline" in the cookie banner or clearing your browser's local storage.


Under KSA PDPL (Saudi Arabia visitors): Processing is based on your consent provided via the cookie consent banner on this Site, in accordance with the Personal Data Protection Law issued by Royal Decree No. M/19.

5. Cookies

Both Google Analytics and Microsoft Clarity use cookies and similar tracking technologies to identify returning visitors and maintain session continuity. No cookies are set until you explicitly accept via the consent banner.


Separately, the like button on blog posts and case studies uses your browser's local storage – not a cookie – to remember only that you personally liked a given page, so the button doesn't reset on your next visit. This is strictly functional, contains no tracking or personal data, is never transmitted anywhere, and does not require consent via the banner above.

6. Data Sharing

I do not sell, rent, or trade your data. Analytics data is shared with Google and Microsoft solely as processors for the services described above. Both companies maintain their own compliance certifications under applicable privacy frameworks.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:


• Right to access: Request a copy of data held about you.

• Right to erasure: Request deletion of your data.

• Right to object: Object to processing of your data.

• Right to withdraw consent: Opt out at any time.

• Right to lodge a complaint: Contact your local data protection authority (EU/EEA) or the Saudi Data & AI Authority (SDAIA) for KSA residents.


To exercise any right, contact: thariqhamad6@gmail.com

8. Data Transfers

Google and Microsoft may process data on servers outside your country of residence, including in the United States. Both maintain Standard Contractual Clauses (SCCs) and other safeguards required under GDPR and applicable laws.

9. Data Security

All data is processed by Google and Microsoft under their respective security standards. This Site is served over HTTPS to protect data in transit.

10. Changes to This Policy

This policy may be updated from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Site after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests:

Email: thariqhamad6@gmail.com

Website: https://thariqhamad.com