Privacy Policy

1. Who runs this website

This website is a personal portfolio, run by me, Thanoa (also known online as @qxthanoa), as an individual based in the United Kingdom. I'm not a registered company, and there's no separate organisation behind the site — I'm the person who decides what data it collects and what happens to it.

2. What information is collected

The only place on this site where you're asked to hand over personal information is the Contact form. If you use it, I receive:

• The Discord username you type in
• The email address you type in
• The contents of your message or enquiry

I don't ask for, or knowingly collect, any other personal details about you through this form or anywhere else on the site.

Aside from the contact form, this website is a static profile page: it doesn't have user accounts, doesn't run any analytics or tracking scripts, and doesn't use cookies. Two display preferences — dark/light theme and site language (English/German) — are saved in your browser's local storage so they persist between visits. That storage stays on your device; it's never sent to me or to anyone else.

Because this site is hosted on Vercel, and loads a small number of resources (fonts, images, a live-status connection) directly from other providers' servers, those providers will typically see standard technical information about your visit — most notably your IP address — in the same way any web server does when your browser requests something from it. This is covered in more detail in sections 5 and 8 below. I don't receive or store this information myself.

3. Why it's processed, and the legal basis

I process the information you submit through the Contact form for one reason: to read your enquiry and reply to it. I don't use it for marketing, profiling, or any automated decision-making.

The legal basis I rely on is your consent — you have to actively tick a box confirming you've read the Terms of Use and acknowledge this Privacy Policy before the form will submit. Where relevant, I also rely on my legitimate interest in being able to respond to messages people choose to send me through a contact form I've published for that purpose.

4. The Discord & Roblox status widgets

The homepage shows my own live Discord and Roblox status, avatar, badges and friends list. This is my own public profile information, not anything collected from visitors. It's fetched automatically — either by the site's server or directly by your browser — from Discord's and Roblox's own public-facing services, and simply displayed back on the page.

Visiting the site doesn't share your Discord or Roblox account, if you have one, with me or with these services in any way. There's no login, no linking of accounts, and no way for the site to identify who you are on either platform.

5. Third-party services used by this site

I don't share the contents of your contact form submission with anyone beyond what's described below. The specific external services this site actually talks to are:

• Vercel — the hosting provider that runs this website and its server-side functions. As with any web host, Vercel's infrastructure processes standard request data (such as IP addresses) to serve pages and keep the service secure. See Vercel's privacy policy for details.
• Discord — contact form submissions are forwarded, from the site's server, to a private Discord channel that only I can see, using a Discord webhook. Your browser also loads avatar, banner and emoji images directly from Discord's content delivery network (cdn.discordapp.com) as part of displaying the page.
• Lanyard (api.lanyard.rest) — an independent, third-party service (not operated by Discord) that provides real-time Discord presence data. Your browser connects to it directly, including over a live WebSocket connection, to keep my Discord status on the page up to date. This connection only carries my public presence data, not anything about you.
• dstn.to — another independent, third-party service, queried by the site's server (not your browser) to fetch my public Discord profile details such as badges and banner colour.
• Roblox Corporation's public APIs — queried by the site's server to show my Roblox status, avatar and friends list. Avatar and friend thumbnail images returned by these APIs are then loaded by your browser directly from Roblox's content delivery network.
• GitHub (raw.githubusercontent.com) — hosts a small set of badge-icon graphics that your browser loads directly.
• Google Fonts (fonts.googleapis.com / fonts.gstatic.com) — the typefaces used across the site are loaded directly from Google's servers by your browser.

None of these services are used for advertising, and I don't run any analytics or tracking tools on this site.

6. How your information is stored

When you submit the Contact form, your message is sent, from the site's server, straight to a private Discord channel that only I can see. It isn't copied into any separate database, and no email is sent automatically anywhere in this process — the email address you provide is simply included in the message content so I can reply to you manually if I choose to.

7. How long information is kept

Contact form submissions are kept for a maximum of 30 days from the date you send them. Once I've read and, where appropriate, replied to your message, I delete the forwarded message from Discord myself, and in any event no later than 30 days after you sent it. I don't archive, export, or keep copies of contact form submissions beyond this window.

8. International transfers

The service providers listed in section 5 — including Vercel, Discord, GitHub and Google — are based outside the UK, and your information (or, in the case of directly-loaded resources, your IP address) may be processed on servers located outside the UK and European Economic Area, including in the United States. Where this happens, these providers are responsible for putting appropriate legal safeguards in place, such as the UK's International Data Transfer Addendum or the EU Standard Contractual Clauses. You can find more detail in each provider's own privacy policy.

9. Security

The site is served over HTTPS. The Discord webhook address the contact form relies on is stored as a server-side environment variable and is never included in the website's public code, so it isn't visible to visitors. Contact form submissions are validated on the server as well as in the browser, so the form can't be bypassed simply by skipping the page's JavaScript.

No method of transmission or storage is completely secure, so while I take reasonable steps to protect your information, I can't guarantee absolute security.

10. Your rights

If you're in the UK or EU, data protection law gives you a number of rights over your personal information. In relation to anything you've sent me through the Contact form, you can ask me to:

• Access the information I hold about you
• Correct it, if it's inaccurate or incomplete
• Delete it straight away, rather than waiting for the 30-day maximum
• Restrict or object to how it's processed
• Withdraw your consent at any time, which won't affect anything already done before you withdrew it

To exercise any of these, see the contact details in section 13. I'll respond as quickly as I reasonably can.

11. Complaints

If you're unhappy with how I've handled your personal information, I'd appreciate the chance to sort it out directly first — but you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

12. Changes to this policy

I may update this policy from time to time, for example if the website starts doing something new with your information. Any changes will be posted on this page with an updated "last updated" date at the top.

13. Contact

The quickest way to reach me about anything in this policy, including any of the rights listed in section 10, is on Discord: @qxthanoa. I don't publish a separate email address for this website, so Discord is the best way to get in touch.