Privacy Policy
Last updated: October 9, 2026This is a personal portfolio site. I want to be straightforward about what happens when you visit it: no corporate boilerplate, just a plain account of what I collect and why.
What I collect
Usage data & Analytics
When you first visit the site, you'll see a cookie banner asking whether to allow analytics. If you choose "Accept," Google Analytics loads and collects basic technical information: your IP address, browser type, approximate location, which pages you visited, and how long you spent on them. This helps me understand how the site is being used so I can improve it. If you choose "Decline," no analytics script loads and none of this is collected.
If you're on a mobile device and you've accepted analytics, this may also include your device type, operating system, and mobile browser.
Cookies
Your choice on the cookie banner is remembered in your browser's local storage so you're not asked again. If you accept, Google Analytics also sets its own cookies to track return visits. You can change your mind at any time with the "Cookie settings" link in the footer of any page. If you switch analytics off, I stop sending data and remove the Google Analytics cookies from your browser.
Contact form
If you choose to fill in the contact form, I will receive your name, email address, organisation (if you include it), and your message. I use this information solely to reply to your inquiry. It is processed securely through Formspree, a third-party form service, and sent directly to my inbox.
Document downloads
The Services Guide and CV are available with an access code or an email address. If you use the email option, I receive your address through Formspree, the same service as the contact form, along with the name of the document you asked for. I use it only to know who is reading these documents and to follow up if it looks useful. If you enter an access code instead, nothing is sent anywhere.
How I use your data
I use what you send me through the contact form, and the email address you give for a document download, only to respond to you and to know who is reading those documents. If you accept analytics, the usage data described above is used only to understand how the site is used. I do not sell data, share it with advertisers, or add you to any marketing lists.
How long I keep it
I only keep personal data for as long as it's needed for the purpose it was collected, or as long as required to meet any legal obligations. Contact form submissions are kept only as long as the conversation is relevant.
Where it's processed
Your data may be processed outside Sri Lanka, depending on where the third-party services I use are based. By using this site, you're agreeing to that. I only use services I trust to handle data responsibly.
Hosting and fonts
This site is hosted on Vercel and delivered through Cloudflare, which process standard server logs (such as your IP address) in order to serve pages. Fonts are loaded from Fontshare, a third-party service, which also receives your IP address when a page loads.
Embedded video
One case study (Practical Solutions for Inclusive Growth) embeds a YouTube video, using YouTube's privacy-enhanced mode (youtube-nocookie.com). YouTube receives your IP address when that page loads, and may set cookies once you press play. Its own privacy policy applies from that point.
Links to other sites
The site links out to other places: Medium, LinkedIn, GitHub, UN publications, and project links. Once you leave this site, I have no control over what those sites collect. It's worth checking their privacy policies if you're concerned.
Changes
If this policy changes, I'll update the date at the top. It's worth checking back occasionally if this matters to you.
Questions
If you have questions about any of this, email me directly at consultchatura@gmail.com.