Privacy Policy

Welcome to Umbi ("we," "us," or "our"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and share your personal information. This Privacy Policy explains our data practices when you visit our website at umbi-blog.vercel.app (the "Site"). By using our Site, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide when interacting with our Site:

• Contact Form Submissions: Your name, email address, subject category, and message content when you use our Contact page
• Comments: Your GitHub username, display name, and comment content when you participate in discussions through our Giscus commenting system
• Newsletter Subscriptions: Your email address when you subscribe to receive updates

1.2 Information Collected Automatically

When you visit our Site, certain information is collected automatically through cookies and similar technologies:

• Device Information: Browser type and version, operating system, device type (desktop, mobile, tablet), and screen resolution
• Usage Data: Pages visited, time spent on each page, click patterns, scroll depth, and navigation paths
• Network Information: IP address (anonymized where possible), approximate geographic location (country/region level), and referring URL
• Technical Data: Language preferences, time zone, and JavaScript support status

1.3 Information from Third-Party Services

We may receive limited information from third-party services integrated into our Site, such as authentication data from GitHub (via Giscus comments) and anonymized analytics data from Google Analytics.

2. How We Use Your Information

We use the collected information for the following purposes:

3. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and serve personalized advertisements. A cookie is a small data file stored on your device when you visit a website.

3.1 Types of Cookies We Use

• Essential Cookies: Required for basic site functionality such as page navigation, security features, and remembering your preferences. These cookies do not collect personally identifiable information.
• Analytics Cookies: Used by Google Analytics to track how visitors use our Site, including pages visited, session duration, and traffic sources. This data helps us improve our content and user experience.
• Advertising Cookies: Used by Google AdSense and its partners to serve advertisements relevant to your interests. These cookies may track your browsing activity across different websites to build a profile of your interests.
• Functionality Cookies: Remember your preferences such as theme settings, language, and previously viewed content to provide a personalized experience.

3.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when a cookie is being set. Please note that disabling cookies may affect the functionality of certain features on our Site. You can also opt out of personalized advertising by visiting Google Ads Settings, Digital Advertising Alliance, or Network Advertising Initiative.

4. Google AdSense Advertising

Our Site uses Google AdSense, a web advertising service provided by Google LLC ("Google"), to display advertisements. Google AdSense uses cookies, including the DoubleClick DART cookie, to serve ads based on your prior visits to our Site and other websites on the Internet.

How Google AdSense works on our Site:

• Third-party vendors, including Google, use cookies to serve ads based on your previous visits to our Site and/or other websites
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your browsing patterns
• You may opt out of personalized advertising by visiting Google Ads Settings
• You may opt out of third-party vendor cookies for personalized advertising by visiting aboutads.info

For more information about how Google uses data when you use our Site, please visit Google's Privacy & Terms page.

5. Google Analytics

Our Site uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to help us analyze how visitors use our Site. The information generated by the cookie about your use of the Site (including your anonymized IP address) is transmitted to and stored by Google on servers in the United States.

Data collected by Google Analytics includes:

• Number of visitors and sessions
• Session duration and bounce rate
• Pages viewed and navigation paths
• Traffic sources (search engines, direct, referral, social)
• Geographic location (country/region level)
• Device and browser information
• User demographics and interests (aggregated, anonymized data)

We have enabled IP anonymization in Google Analytics, which truncates your IP address before storage. You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on.

6. Third-Party Services

We integrate the following third-party services into our Site. Each service has its own privacy policy governing the data it collects:

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

8. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it, including:

• Encryption in Transit: All data transmitted between your browser and our Site is encrypted using TLS/SSL (HTTPS)
• Secure Hosting: Our Site is hosted on Vercel with enterprise-grade security infrastructure
• Database Security: Data stored in Supabase is protected with row-level security (RLS) and encrypted at rest
• Access Controls: Administrative access to our systems is restricted and protected by multi-factor authentication
• Regular Updates: We keep all software dependencies and platforms up to date with the latest security patches

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Object: Object to processing of your data for certain purposes, including direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us at ummbij@gmail.com. We will respond to your request within 30 days.

10. GDPR Compliance (European Economic Area)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• We process your personal data based on legitimate interests, consent, or legal obligations as outlined in Section 2
• You have the right to lodge a complaint with your local Data Protection Authority (DPA) if you believe your rights have been violated
• We will not transfer your personal data to countries outside the EEA without adequate data protection safeguards
• We do not engage in automated decision-making or profiling that produces legal effects concerning you

Data Controller: Umbi Blog, operated by Umbi. For GDPR-related inquiries, contact us at ummbij@gmail.com.

11. CCPA Compliance (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out of Sale: We do not sell your personal information. However, the use of advertising cookies by Google AdSense may be considered a "sale" under the CCPA. You can opt out by adjusting your cookie preferences
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

To submit a CCPA request, contact us at ummbij@gmail.com with the subject line "CCPA Request." We will verify your identity before processing your request and respond within 45 days.

12. Children's Privacy

Our Site is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child, please contact us at ummbij@gmail.com.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Due to the lack of a uniform standard for interpreting DNT signals, our Site does not currently respond to DNT browser signals. However, you can manage your tracking preferences through your browser cookie settings and the opt-out links provided in this policy.

14. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our hosting providers and third-party services operate. These countries may have data protection laws that differ from those in your jurisdiction. By using our Site, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via a prominent notice on our Site. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Site after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: