your data, plainly.

Who is responsible

This site is run by Shasha, trading as shashathink, an independent design and development practice based in Colombo, Sri Lanka. I am the data controller for everything described here. For any question or request about your data, email hello@shashathink.com.

What I collect, and when

There is no account system and no tracking of individuals across the site. Personal data is only collected when you deliberately hand it over, in one of two places:

• +The enquiry form — your name, email address, and whichever of company, service, budget, timeline and project description you choose to fill in. Only name, email and the description are required.
• +The newsletter form — your email address, the date you signed up, and which of the two forms on the site you used.

Why, and on what basis

Enquiry details are used to reply to you and to scope the work you are asking about. The basis is your request — you sent it in order to get an answer. If we go on to work together, the same details become part of the project record.

Your newsletter address is used only to send the newsletter. The basis is your consent, given by clicking the confirmation link. Until you click it nothing is sent, and an address that is never confirmed is never mailed.

The newsletter, specifically

Signing up records your address as pending and sends you one email containing a confirmation link. Clicking it is what actually subscribes you. This is deliberate: it means nobody can add you to the list by typing your address into the form.

Every issue carries a one-click unsubscribe link that needs no login and no explanation. Unsubscribing marks the record as unsubscribed and I stop sending. Ask me and I will delete the record entirely.

Who else processes your data

I do not sell or share personal data. It is handled by a small number of providers, each doing one job:

• +Vercel — hosting and delivery of this site, including standard server logs containing IP addresses.
• +Sanity — the content management system, which also stores newsletter subscriber records.
• +Resend — sends the enquiry notification to me and the confirmation email to you.
• +Google AdSense — advertising, on the journal pages only. See below.
• +Plausible Analytics — privacy-focused, cookieless page statistics. It sets no cookies and does not build a profile of you or follow you across sites.

Advertising and cookies

Google AdSense is loaded on the journal index and journal articles, and on no other page of this site. If you never visit a journal page, the AdSense script is never requested by your browser.

Where it does load, Google and its partners may set cookies or read existing ones to select and measure ads, including personalised ads based on your prior browsing. This is Google's processing, under Google's terms, not mine.

You can turn off personalised advertising in your Google Ads Settings, and manage or block cookies in your browser. Doing so does not stop you reading anything on this site.

Nothing else on the site sets a cookie. The theme preference and the first-visit flag for the loading animation are stored locally in your own browser, are never transmitted anywhere, and are not cookies.

How long it is kept

Enquiries are kept for as long as there is a plausible reason to — an active conversation, a live project, or the record of one. Enquiries that go nowhere are deleted periodically.

Newsletter records are kept until you unsubscribe or ask for deletion. Unsubscribed records are retained only so that you are not re-added by mistake, and can be removed entirely on request.

Your rights

You can ask me for a copy of what I hold about you, ask me to correct it, or ask me to delete it. Email hello@shashathink.com and I will action it — I am one person, so it will not be a ticketing system, but it will be done.

There is no automated decision-making and no profiling anywhere in this site.

Children

This site is aimed at businesses and professionals. It is not directed at children and I do not knowingly collect data from them.

Changes

If what the site does changes, this page changes with it, and the date at the top changes too. Material changes to how your data is used will not be applied retroactively without telling you.