Privacy

This privacy notice explains how I, Rafi, handle personal data when you visit scribenest.pro — a personal blog hosted independently from a flat on Jalan Rajah in Whampoa. I am not a company. There is no corporate entity behind this site, no team page, no customer database in the commercial sense. Still, privacy law applies to personal data, and I take that seriously even on a small table by a window.

1. Who is responsible

The data controller for this website is Rafi, reachable at [email protected] or Blk 39 Jalan Rajah, #08-06, Singapore 320039. I make the decisions about what this site collects and why. If you have questions about this notice, write to that email address with the subject line "Privacy" so I can find it among the ordinary mail.

2. What this site is — and is not

Scribe Nest is a static personal blog. There is no account system, no checkout, no comment form, no newsletter signup, and no contact form that stores your message on my server. When you email me, your message lives in my mail provider's systems according to their policies, not in a database I built for this site. I describe that separately below because it matters for expectations.

3. Personal data I may collect

Data you send voluntarily. If you email me or call the published phone number, I receive whatever you choose to share — your email address, your name if you include it, the content of your message, and metadata such as the time sent. I use that information only to read and reply, to correct factual errors on the site if you point them out, or to acknowledge correspondence I asked for. I do not add you to a marketing list because there is no marketing list.

Technical data from hosting. My hosting provider may log standard server information when you request a page: IP address, browser type, referring URL, time of request, and status codes. I do not personally browse these logs daily, but they exist for security and troubleshooting. Retention depends on the host's policy; I choose providers that delete or aggregate logs within a reasonable period.

Cookie and storage data. This site uses a first-party cookie and localStorage entry to remember your cookie preferences. Details — including the cookie name, retention period, and categories — are in the cookies notice. Please read that page if you want the full picture of what is stored on your device.

Embedded Google Maps. Every content page includes a Google Maps iframe centred on the Whampoa / Balestier neighbourhood at approximate scale. Google may process technical data when the map loads. I treat maps as functional embedded content and disclose behaviour under Accept and Reject on the cookies page. A short summary: on this site the map embed remains available because it is classified as strictly functional; Google may still set or read cookies according to their policies when the embed loads.

4. Purposes and legal bases

I process personal data for these purposes:

• Operating and securing the website (hosting logs, error diagnosis).
• Remembering your cookie choice so the banner does not reappear unnecessarily.
• Showing neighbourhood context via embedded maps you expect on a local personal blog.
• Responding to email or phone messages you initiate.
• Correcting factual errors when you help me improve a page.

Under the Personal Data Protection Act 2012 (PDPA) of Singapore, consent is one basis; legitimate interests in running a small personal site securely is another, provided those interests are not overridden by your rights. Where consent is required — for optional analytics if ever enabled — I ask through the cookie banner and default optional categories to off.

5. What I do not do

I do not sell personal data. I do not buy mailing lists. I do not run behavioural advertising on this site. I do not require you to create an account to read. I do not ask for your NRIC, payment card, or government identifiers. I do not profile visitors for commercial offers because there is nothing to offer except paragraphs.

6. Sharing and disclosure

I share data only where necessary to operate the site:

• Hosting provider — stores the static files and may process IP addresses in logs.
• Email provider — delivers and stores messages you send to [email protected].
• Google — when a Maps embed loads, Google's terms and privacy policy apply to their processing.
• Font delivery — pages link to Google Fonts; Google may receive technical data when fonts are fetched. I use display=swap and preconnect to minimise unnecessary delay.

I may disclose information if required by law, court order, or to protect rights and safety where genuinely necessary. I have not received such requests to date on this blog.

7. International transfers

Some providers may process data outside Singapore, including in the United States or European Union. Where applicable, I rely on contractual protections offered by those providers or your consent when you continue to use embedded services after making a cookie choice.

8. Retention

Email correspondence: I keep messages as long as needed to reply and for a reasonable period afterwards in case you follow up — typically up to twenty-four months unless the thread is clearly complete sooner. Hosting logs: according to provider defaults, usually rotated within weeks. Cookie preference: about six months, then the banner may ask again. Static pages may be archived in backups; backups rotate on the host's schedule.

9. Your rights under PDPA

Subject to exceptions in the Act, you may request access to personal data I hold about you, correction of inaccurate data, and withdrawal of consent where processing is consent-based. Withdrawing consent for essential cookies may limit site functions such as remembering your choice. You may contact me at [email protected] to exercise these rights. I will respond within a reasonable time. If you remain unsatisfied, you may lodge a complaint with the Personal Data Protection Commission of Singapore.

10. Security

I use HTTPS, keep software dependencies minimal on this static site, and choose hosting with sensible access controls. No method of transmission is perfectly secure; email in particular is not a sealed envelope. Please do not send highly sensitive information by email unless you accept that risk.

11. Children

This blog is written for general readers and is not directed at children. I do not knowingly collect data from anyone under thirteen. If you believe a child has contacted me in error, write and I will delete the correspondence.

12. Links to other sites

Occasionally I may link to an external page for context. I am not responsible for the privacy practices of sites I do not control. Read their notices before you share data there.

13. Changes to this notice

I may update this page when practices change or when law requires. The "Last updated" line at the top will change. Material changes will be described plainly here rather than silently edited.

14. Disclaimer reminder

This is a personal blog. Everything here reflects my own experiences, opinions, memories and impressions. These notes are personal reflections, not professional, medical, legal, financial or news-reporting advice. Where a note touches a serious event nearby, I only describe what I heard or saw from my end of the street — never as reporting.

For cookie-specific details, including the Manage cookies control, see cookies. For how to reach me, see knock.