Privacy Policy

Last updated: 27 July 2026 This Privacy Policy explains how ShaSec (https://shasec.my.id) collects, uses, and protects information when you visit our site. By using this site, you agree to the practices described below.

1. Data controller

2. Information we collect

2.1 Information you provide voluntarily

If you send a message via the contact form or email, we may receive:

• Name
• Email address
• Message body / subject This data is only used to respond to your request.

2.2 Automatic technical data

Like most sites, servers and third-party services may process technical data, for example:

• IP address (truncated/anonymized when supported)
• Browser and device type
• Pages visited, visit time, and referrer URL
• Cookies or similar local storage identifiers

3. Cookies and similar technologies

We may use cookies and similar technologies to:

• Run core site functions
• Remember preferences
• Analyze traffic in aggregate
• Show ads (including Google AdSense) when enabled You can control or delete cookies in your browser settings. Rejecting certain cookies may affect features or ad personalization.

4. Google AdSense and ad partners

ShaSec may display ads via Google AdSense and partners working with Google.

• Google, as a third-party vendor, uses cookies to serve ads based on prior visits to this and/or other sites.
• Ad cookies enable Google and partners to serve ads based on your visits across the web.
• Opt out of personalized ads at Google Ads Settings.
• See Google Privacy Policy and How Google uses data when you use partner sites or apps. Other third-party ad cookies may be used by authorized suppliers. Partner lists may change over time.

Cookies and consent

Where consent is required, we align consent mechanisms before non-essential / advertising cookies are fully enabled.

5. Analytics (if enabled)

If we enable analytics (e. G. Google Analytics or equivalent), data is used to understand content performance in aggregate, not to personally identify you. IP anonymization is preferred when available.

6. Processing purposes

Data is used to:

• Provide and maintain the site
• Respond to messages you send
• Improve content and technical security
• Serve relevant ads (when AdSense is active)
• Meet applicable legal obligations

7. Legal bases

Depending on context: performance of a requested service, legitimate interests of the site operator (security, service improvement), and/or consent (cookies/ads where required).

8. Retention and security

We apply reasonable technical and organizational measures to protect data. No internet transmission is 100% secure. We cannot guarantee absolute security. Contact messages are kept only as long as needed for handling and administration, unless law requires longer retention.

9. Sharing & processors

We do not sell your personal data. Data may be processed by infrastructure providers acting as processors / independent third parties under their own policies, solely to run the site and related features:

• Hosting & CDN: Vercel (hosting, edge network, security headers)
• Contact & subscribe forms: Formspree (processes name, email, message to deliver to our inbox) — see Formspree Privacy Policy
• Analytics (if enabled): Google Analytics 4 (aggregate, IP anonymization where possible)
• Ads (if enabled): Google AdSense and Google ad partners — see Google Privacy Policy

Formspree stores messages per its retention for delivery and anti-spam. We delete messages from operational inbox after handling, unless retention is required by law.

9a. Contact message retention

Contact form messages are kept for handling (typically 30–90 days) then deleted or minimally archived for correction audit. If you request deletion, we process it within 14 business days after verification.

10. Your rights

Subject to applicable law, you may have rights to:

• Access personal data we hold about you
• Request correction or deletion
• Object to or restrict certain processing
• Withdraw consent (where processing is consent-based) Submit requests via the Contact page or email shaguardian24@gmail.com. We may request reasonable verification before processing requests.

11. External links

The site may link to third-party sites. We are not responsible for their privacy practices. Please review their policies separately.

12. Children's privacy

This site is not directed at children below the age required by local law to consent to data processing. We do not knowingly collect data from children.

13. Policy changes

We may update this Privacy Policy from time to time. The "Last updated" date above will change. Continued use after changes means you accept the revised policy to the extent permitted by law.

14. Contact

Privacy questions: use the Contact page or email shaguardian24@gmail.com.