Privacy Policy

This is the personal portfolio of Sachin Karunarathna, a software engineer based in Colombo, Sri Lanka. This policy explains what information the site handles when you visit it or get in touch, and what happens to that information afterwards.

The short version: this site has no accounts, no advertising and no tracking cookies. It does not store the messages you write in the contact section. Anything you send reaches me through WhatsApp or your own email client.

The contact section builds a message from what you type and opens it, pre-filled, in WhatsApp or your email application. The text stays in your browser until you press send in that app, and no copy is submitted to this website or its servers.

Once you send the message, it is delivered to me through that channel and I receive whatever it contains, typically:

• Your name, if you provide it
• Your phone number (WhatsApp) or email address (email), as supplied by the app you send from
• The subject and message content you wrote, including any attachments you add yourself

Please do not send passwords, API keys, financial details or other confidential material through these channels.

Two things happen without any action from you:

• Analytics: the site uses Vercel Analytics to count page views and measure performance. It records aggregated, anonymous signals such as page path, referrer, country, browser and device type. It does not use cookies and does not build a profile of you across other websites.
• Server logs: the hosting provider records standard request data, including IP address, timestamp and user agent, for security and reliability purposes.

Your light or dark theme preference is saved in your browser's local storage under the key 'theme'. It never leaves your device and is only read to render the site the way you left it. Clearing your browser data removes it.

This site sets no advertising or tracking cookies.

Information is used only for these purposes:

• Replying to your message and continuing the conversation you started
• Discussing, scoping and delivering work you have asked about
• Understanding which parts of the portfolio are viewed, in aggregate, so it can be improved
• Keeping the site secure and available

Your information is never sold, rented or traded, and it is never used to send marketing you did not ask for.

A few services process data on my behalf or on their own terms. Each has its own privacy policy, which governs what it does with your information:

• Vercel - hosting and analytics for this site
• WhatsApp (Meta) - if you choose the WhatsApp option, the conversation is carried and stored on WhatsApp's infrastructure under its own terms
• Your email provider and mine - if you choose the email option, the message travels through both
• External links - project links point to sites such as GitHub and client websites, which are outside my control

Messages you send me are kept in my WhatsApp or email history for as long as the conversation stays useful, and are deleted when it no longer is. Aggregated analytics are retained by Vercel according to its own retention schedule. Nothing about you is stored in a database maintained by this site, because it has none.

You can ask me to show you what correspondence I hold from you, correct it, or delete it. Send that request to sachinkaru.tm@gmail.com and I will action it within 30 days.

You are also free to browse the portfolio without contacting me at all, to block analytics with a content blocker, and to clear the theme preference by clearing your browser storage.

The site is served over HTTPS and holds no user database, which keeps the amount of information at risk very small. No method of transmission over the internet is completely secure, so please use judgement about what you send through a contact form or chat app.

This portfolio is aimed at employers, clients and fellow engineers, and is not directed at children under 16. I do not knowingly collect information from them. If you believe a child has sent me personal information, contact me and I will delete it.

The site is operated from Sri Lanka and can be viewed from anywhere. If you contact me from another country, your message will be handled in Sri Lanka and by the providers listed above, which may store data in other jurisdictions.

If the site changes in a way that affects this policy, the text here is updated and the date at the top is revised. Material changes will be obvious on this page rather than announced separately, so it is worth a look if you have not visited in a while.