Privacy Policy

Last updated: October 20, 2026

This is the personal website of Md Golam Mostafa Tutul, a freelance WordPress, CRM and AI developer based in Bangladesh. This page explains what information is collected when you visit mostafaworks.com, why, and what you can do about it. I’ve kept it short and plain on purpose.

Who is responsible for your data

Md Golam Mostafa Tutul
Bangladesh
Email: hello@mostafaworks.com

I run this site on my own. There is no company or team behind it, so any question about your data comes straight to me.

What I collect and why

When you contact me

The site has no contact form. If you email me or message me on WhatsApp, I receive whatever you choose to send, usually your name, email address or phone number, and details about your project. I use this only to reply to you and, if we work together, to manage the project. I don’t add you to a mailing list and I don’t sell or share your details.

Comments on blog posts

If you leave a comment, WordPress stores your name, email address, website (if you add one), the comment itself, your IP address and your browser’s user agent. This helps with spam detection and lets me reply. Your email address is never shown publicly.

If you tick the box to save your details, a cookie stores your name and email for one year so you don’t have to type them again.

Analytics: Google Analytics 4

I use Google Analytics 4 to understand how people find and use the site: which pages are read, how long visits last, roughly which country visitors come from, and what device and browser they use. Google sets cookies (such as _ga) to do this. I don’t use this data to identify you personally, and I have not enabled advertising features. Google’s own practices are described in the Google Privacy Policy.

Behaviour analytics: Microsoft Clarity

I use Microsoft Clarity to see how visitors interact with pages, for example where people click and how far they scroll, using heatmaps and session recordings. This helps me fix layout problems and make the site easier to use. Clarity masks text you type and sensitive content by default. Microsoft sets cookies (such as _clck and _clsk) for this. See the Microsoft Privacy Statement for details.

Server and security logs

Like almost every website, the hosting server keeps standard logs that include IP addresses, the pages requested and the time of the request. The site also records requests to pages that don’t exist (the URL, referring page and browser type) so I can fix broken links. These logs are used for security and maintenance only.

Cookies used on this site

• Google Analytics (_ga, _ga_*): visit statistics, up to 2 years.
• Microsoft Clarity (_clck, _clsk, CLID): heatmaps and session recordings, up to 1 year.
• WordPress comment cookies (comment_author_*): only if you choose to save your details, 1 year.
• Theme preference: if you switch to dark mode, your choice is saved in your browser’s local storage, not sent to me.

You can block or delete cookies in your browser settings at any time. The site works normally without them. You can also opt out of Google Analytics with Google’s browser add-on.

Embedded content and external links

Blog posts and portfolio pages link to other websites, such as WordPress.org, LinkedIn and GitHub. Once you leave this site, their privacy policies apply, not this one. Fonts on this site are served from my own server, so no font requests go to third parties.

Who your data is shared with

I don’t sell, rent or trade personal data. Information is only processed by the services needed to run the site: my web host, Google (Analytics) and Microsoft (Clarity). These providers may store data on servers outside your country, including in the United States.

How long data is kept

• Emails and messages: as long as needed to handle your enquiry or our project, then deleted when no longer needed.
• Comments: kept until you ask me to remove them or I remove them.
• Google Analytics data: kept for up to 14 months, then deleted automatically.
• Clarity data: kept according to Microsoft’s retention settings (recordings are typically removed after 30 days).

Your rights

Wherever you live, you can ask me to tell you what personal data I hold about you, correct it, delete it, or stop using it. If you are in the EU, UK or a US state with privacy laws such as California, you have these rights under the GDPR, UK GDPR or CCPA. Just email hello@mostafaworks.com and I’ll reply within 30 days. I don’t sell personal information.

If you’ve left a comment, you can also request an export or deletion of the data WordPress holds about you.

Children

This site is meant for businesses and adults. I don’t knowingly collect information from anyone under 16.

Changes to this policy

If I add new tools or change how data is used, I’ll update this page and the date at the top.

Contact

Questions about this policy or your data: hello@mostafaworks.com