Privacy Policy

Last updated: 29 October 2026

This is the personal website of Yujan Chalise ("I", "me"), based in Kathmandu, Nepal. This page explains what happens to your information when you use yujanchalise.com.np. I keep it as small as I can: there are no ads, no tracking and no analytics on this site.

What I collect, and why

• Browsing only: nothing is stored about you. Your language and colour choices are saved in your own browser (local storage), not on my server.
• If you create an account with email and password: your name, your email address, and a scrambled (salted, slow, "peppered") version of your password. I never store the password itself and cannot read it.
• If you sign in with Google, GitHub, Microsoft, Discord, Facebook, LinkedIn, GitLab, X or TikTok: I receive your name and email address from that service (X and TikTok share no email) and its internal ID for you. I do not receive your password there, I cannot post for you, and I do not read your messages, contacts or posts. I only ask for basic profile access.
• If you send a message through the contact form: the name, email address and message you type. A copy is also emailed to me so I can reply.
• Security counters: to slow down spam and password guessing, short-lived counters are kept against a scrambled fingerprint of your network address (not the address itself) for up to two days.

Cookies

• Sign-in cookie (__Host-session): created only when you sign in, so you stay signed in for up to 14 days. It is protected so scripts on the page cannot read it.
• Short sign-in helper cookie (__Host-oauth): lives for 10 minutes while you sign in with another service, then is removed.
• There are no advertising, tracking or analytics cookies.

Who else handles your data

• Cloudflare hosts the website, stores the database, delivers email to me and, when switched on, runs the "are you human" check (Turnstile). It may keep ordinary server logs. See Cloudflare's own privacy policy.
• The sign-in service you choose (for example Google) handles your login under its own privacy policy.
• I do not sell your data and I do not share it with advertisers.

How long I keep it

Account details and messages are kept until you delete your account or ask me to delete them. Sign-in sessions end after 14 days. Security counters are removed within about two days.

Your choices

• You can delete your account yourself: sign in, open your account window, and choose "Delete my account". This removes your account, your sign-in links and the messages tied to it.
• You can ask me to see, correct or delete your information through the contact form at yujanchalise.com.np.
• You can stop any service from signing you in at any time by removing this site's access in that service's settings.

Security

The site uses encryption in transit (HTTPS), hashed passwords, protected cookies, request limits and a strict content policy. No system is perfectly secure, but I take care to protect what is stored.

Changes

If I change this page, I will update the date at the top.

Contact

Questions about this policy: use the contact form at yujanchalise.com.np.

This page is general information written in plain language. It is not legal advice.