Privacy policy

Foliony (foliony.app) is the personal website and portfolio of Joshua Adjei, who decides how the information described here is used and is responsible for it. In this policy, "I", "me" and "my" refer to Joshua Adjei, and "you" refers to anyone who uses the site.

You can reach me about anything in this policy via joenash156@gmail.com.

• Browsing is anonymous. Visits are counted without cookies and without storing your IP address.
• Messages are kept so I can reply, and are deleted automatically after a year.
• Signing in is optional. If you sign in to comment or like a post, I keep your name, email address and profile picture from Google, and what you post.
• Nothing is sold, rented or used for advertising.
• You stay in control. You can ask to see, correct or delete what I hold about you at any time.

When you browse the site

To understand which pages are useful, the site counts visits with privacy-friendly analytics built into the site itself. For each page view it stores the page address, the site language, the website that linked to it (only its domain, such as google.com), your country (worked out from your connection, not your exact location), the type of device (desktop, phone or tablet) and the name of your browser.

It does not store your IP address, your full browser details or any cookie. To count unique visitors, it keeps a short code computed from your connection and browser together with a secret key that changes every day: the code cannot be recognised the next day, and it cannot be turned back into your IP address.

If your browser sends a Do Not Track or Global Privacy Control signal, no visit is recorded at all. Visits by search engines and other automated programs are not recorded either. Downloads of my CV are counted in the same anonymous way.

When you use the contact form

I receive the name, email address, subject and message you enter, and the language of the page, and use them to read and answer your message. To keep out spam, the form uses Cloudflare Turnstile, which checks that the message comes from a person; Cloudflare processes technical information about your browser and connection to do this. I may receive an email notification of your message, and if automatic replies are switched on, you receive one short confirmation email.

When you sign in to comment or like a post

Signing in is only needed to comment, reply, like a post or report a comment, and uses your Google account. From Google I receive your account ID, name, email address and profile picture; I never see your Google password. Your name and picture are shown next to your comments; your email address is never shown publicly.

I keep your comments, replies, likes and reports, and details of your signed-in sessions (for example "Chrome on Windows", and when the session started and was last used), so you can stay signed in and so the site can be protected from misuse.

Security and abuse prevention

To stop abuse, the site limits how often some actions can be repeated, such as sending messages or signing in. It does this with a coded form of your IP address or account, kept only for the short time each limit covers. Sign-ins and important changes are recorded in a security log. The hosting provider also keeps short-lived technical logs, which can include IP addresses, to run and secure the service.

Where data protection laws apply, such as Ghana's Data Protection Act, 2012 (Act 843) or the EU General Data Protection Regulation, I rely on:

• Legitimate interests for anonymous analytics, security, spam prevention and answering messages: running a safe, useful site and replying to people who write to me.
• Providing what you asked for when you sign in, comment, reply or like a post.
• Consent where you give it, for example by choosing to send a message. You can withdraw it at any time.

The site uses no advertising or tracking cookies, and its analytics use no cookies at all. It only stores what it needs to work:

When you start signing in to like or comment, the site may briefly remember in your browser what you were about to do, so it can finish it afterwards. Because all of these are strictly necessary for features you use, they do not need your consent.

I do not sell or rent your information or share it with advertisers. It is processed only by the services that run the site, each under its own privacy and security commitments:

• Vercel hosts and serves the website.
• MongoDB Atlas stores the site's database.
• Cloudinary stores and delivers images and documents.
• Resend sends emails, such as notifications and automatic replies.
• Google provides sign-in, if you choose to sign in.
• Cloudflare provides Turnstile, the spam check on the contact form.

I may also disclose information if the law requires it, or to protect the rights, safety or property of anyone, including this site.

These providers may process information in countries other than your own, including the United States and member states of the European Union. Where that happens, I rely on the safeguards the providers offer, such as standard contractual clauses, to keep it protected.

Every connection to the site is encrypted (HTTPS). Sign-in goes through Google, sign-in tokens are only ever stored in coded form, and the private area where the site is managed is open only to accounts I approve. No method of storing or sending information is completely secure, but I take reasonable steps to protect yours and to act quickly if something goes wrong.

Depending on where you live, you may have the right to:

• ask what information I hold about you, and receive a copy;
• have it corrected if it is wrong or incomplete;
• have it deleted;
• object to, or ask me to limit, how it is used;
• withdraw any consent you gave;
• complain to a data protection authority, such as the Data Protection Commission in Ghana or the authority where you live.

While signed in, you can edit or delete your own comments at any time. For anything else, contact me via joenash156@gmail.com. I may need to confirm it is really you before acting, and I will reply within one month.

You can also switch on Do Not Track or Global Privacy Control in your browser to stop your visits being counted.

This site is not directed at children under 13, and I do not knowingly collect information from them. If you believe a child has given me information, contact me via joenash156@gmail.com and I will delete it.

If I change how information is handled, I will update this page and the "Last updated" date at the top. Significant changes will also be pointed out on the site.

For questions or requests about your privacy, contact me via joenash156@gmail.com.