Privacy at NotThor

Contact form

When you submit the contact form, the server processes your name, email address, subject, message, privacy acknowledgement, submission timing, and basic request metadata. Valid messages can be sent to a private Discord webhook so Yousef can reply. Full message content is not written to routine application logs.

Optional visitor notifications

The server can optionally notify the owner when a request matches a configured IP address, approximate country, approximate region, or page. Alerts can include the IP address, page, time, user agent, referrer, and match reason. The feature is disabled by default and protected by rate limits and short cooldowns.

An IP address does not reliably identify a person. Addresses can be shared, reassigned, proxied, or changed by a VPN. Country and region lookups are approximate and may be wrong.

Country Easter eggs

Optional country-based pages use Cloudflare's approximate country code. Nginx accepts that code only from verified Cloudflare proxy ranges. A signed HTTP-only cookie and a temporary server entry prevent repeated effects. The server entry uses an HMAC hash of the normalized IP address rather than retaining the raw address, expires automatically, and is not a long-term visitor history.

Requests approximately located in Norway are refused with HTTP 403 before they reach the application. Country lookup is approximate and does not establish that a specific person made a request.

The Romania-specific page is available only when the trusted approximate country code is RO. Other countries receive a not-found response.

Retention and tracking

This site does not use invasive browser fingerprinting or a third-party analytics dependency. Operational server logs may be retained for a limited period by the server administrator. Contact notifications remain wherever the owner receives them until they are deleted. Temporary cooldown entries expire automatically.

Questions

To ask about your information, use the contact form on the homepage. Do not include sensitive information that is unnecessary for your request.