Who is responsible for your data
nhanthanh93.com is the personal website of Pham Thanh Nhan (“I”, “me”) — an introduction to my work, projects and writing. I decide why and how personal data collected through this site is processed.
For any privacy question, write to hello@nhanthanh93.com or use the contact page.
What data I collect
You can read the whole site without giving any personal information. Data is only collected in these cases:
- When you send a contact message: your name, email address, subject (if given) and the message itself.
- When you sign in to comment: sign-in is handled by the nt93 account system (oauth.nhanthanh93.com) — this site never receives your password. It receives your account identifier, display name, email and role, together with the comments you post.
- Technical data: IP address, browser type, the page requested and the time of the request — recorded automatically by the server and hosting providers to run the site, prevent abuse (e.g. limiting how often a form can be sent) and keep it secure.
- Visit statistics: via Google Analytics — with “Analytics” on: pages viewed, where you came from, device type and approximate region (with cookies); while off: anonymous cookieless signals only — see the Cookie Policy.
- Cookies: see the Cookie Policy.
Purposes and legal bases
- Replying to your message — based on the consent you give by sending the form.
- Showing and moderating comments, keeping you signed in — to provide a feature you chose to use.
- Security, spam and attack prevention — my legitimate interest in keeping the site safe for everyone.
- Understanding which content is useful (analytics) — based on your consent in the cookie settings; withdraw it at any time.
- Legal obligations — where the law or a competent authority requires it.
I don't use your data for advertising, don't build behavioural profiles and never sell data to anyone.
International transfers
Some of the providers above run servers outside Vietnam (e.g. Singapore, the United States). Where data is processed there, I only use providers that commit to adequate data protection.
How long I keep data
- Contact messages: as long as needed to correspond with you, at most 24 months after the last contact, then deleted.
- Comments: until you ask for removal or the comment is taken down.
- Sign-in session: for the lifetime of the sign-in cookies (at most 30 days), or until you sign out.
- Technical logs: for the short periods the hosting providers apply.
- Analytics data: at most 14 months in Google Analytics, then deleted automatically.
Security
The site uses encrypted connections (HTTPS), httpOnly sign-in cookies, anti-forgery tokens on forms, rate limits and sanitises everything visitors submit. No system is perfectly secure, but I take reasonable measures to protect your data.
Your rights
Under Vietnamese personal data protection law (and the GDPR if you are in the European Union), you have the right to:
- know about and access the data I hold about you;
- have inaccurate data corrected or your data deleted;
- withdraw your consent at any time (without affecting processing before the withdrawal);
- object to or ask to restrict processing, and receive a copy of your data;
- lodge a complaint with the competent data protection authority.
How to exercise your rights
Send your request to hello@nhanthanh93.com. I may ask for information to verify that the data is yours, and will reply within the time the law requires.
Children
The site is not directed at children under 16 and I don't knowingly collect their data. If you believe a child has sent me personal data, contact me and I will delete it.
Changes to this policy
When this policy changes, the “Last updated” date at the top is updated. Significant changes will be clearly announced on the site.