Privacy notice
Visuals by Hunzi · Updated 4 October 2026
Browse without identifying yourself
You can view the portfolio and submit a project inquiry without signing in. Optional analytics starts only after you select “Allow analytics.” Declining does not limit access to the work.
Optional visit and video analytics
With your permission, this site stores session start and activity times, the page path, referral website (domain only), campaign tags, any unique lead-link code, and video opens, plays, pauses, completion events and estimated watch coverage. Watch coverage counts played portions, not skipped portions. Google Drive embeds expose only the opening of the player, not its playback activity. Browser restrictions may prevent tracking.
A first-party secure session cookie connects activity during a visit and expires after 30 minutes without activity. It is not a cross-site identifier. Your analytics preference is stored on this device until you change it or clear browser storage. A unique link may be associated with an outreach label known to Hanzala; it is not proof of the visitor’s identity.
Optional ChatGPT identity sharing
If you explicitly consent and confirm sharing after sign-in, we store the name (if supplied), email and site-specific user identifier provided by ChatGPT and connect them to this visit. Signing in by itself does not add your identity to analytics. This never grants access to your ChatGPT conversations. Only Hanzala’s owner account can view the analytics dashboard.
Project inquiries
When you submit the contact form, we store your name, email, optional WhatsApp number, service, budget, timeline, project details and submission time, so Hanzala can respond to your request. With analytics enabled, the inquiry is linked to that visit. This is not consent to unrelated marketing.
Storage, access and retention
Records are stored in the site’s Cloudflare D1 database. Visitor records are not publicly accessible. Access is restricted on the server to the site owner. Analytics records are retained for up to 180 days and expired records are removed when the next new tracked visit starts. Inquiries remain until the owner deletes them. Lead labels remain until removed by the owner; disabled links no longer attribute new visits.
The hosting provider processes requests to operate the website. For abuse prevention, the site stores an hourly one-way hash derived from the request IP address and a request count. Raw IP addresses are not stored in the analytics database. These rate-limit records are cleaned after 48 hours on the next new tracked visit.
Change your choice or request deletion
Use Privacy settings at the bottom of the portfolio to stop analytics. “Withdraw & remove this session” also deletes the current active analytics session and its events. Earlier sessions and separately submitted inquiries are not automatically deleted. For access, correction or deletion requests, contact tmpatlo1@gmail.com and provide enough details to locate your record.
Third-party video players
Opening YouTube, Vimeo or Google Drive videos sends requests to those services, which apply their own privacy policies. External links such as WhatsApp also follow the destination service’s policies.