Privacy Policy

Effective 26 September 2026

This policy explains how the MulhimDesign portfolio website (mulhimdesign.com) and the MulhimDesign Android app handle your information. The app displays the same website, so this policy covers both. MulhimDesign is run by Shahrul Mulhim in Malaysia.

In short: you can browse the portfolio without an account and there are no ads. Personal information is only collected when you send a message through the contact form, or when you sign in to use a Mulhim Lab tool.

Information you give us

If you use the contact form, it sends your first name, last name, email address, subject and message to MulhimDesign's email inbox. The form is delivered by FormSubmit, a form-to-email service. This information is used only to read and reply to your enquiry. It is never sold, and it is not used for marketing.

Mulhim Lab sign-in

Tools in Mulhim Lab (Site Analysis) ask you to sign in with Google or with a one-time email link. Sign-in is handled by Supabase, which stores your email address, your name and profile picture (if you sign in with Google), and the times you signed in. This is used only to give you access to the tools and to count how many students use them. It is never sold, shared for marketing, or used to send you newsletters.

• Your projects. Site locations, boundaries, notes, checklists, SWOT text and site photos you add in Site Analysis are saved in your browser's storage on your device, not on our servers.
• Google Drive (optional). If you choose Connect Google Drive, each project is also saved as files in a Mulhim Lab folder in your own Google Drive, so you can open it on your other devices. The tool asks Google only for your email address and for permission to see, create and change the files it made itself; it cannot see your other Drive files. MulhimDesign keeps an encrypted Google token for your account so your projects keep saving. It is used for nothing else, is never shared or sold, and is deleted when you choose Disconnect or remove Mulhim Lab from your Google Account (myaccount.google.com/permissions). The files in your Drive stay yours. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Map and data services. To analyse a site, your browser sends its coordinates or your search text to OpenStreetMap services (Nominatim, Overpass, OSRM), Open-Meteo (climate and elevation), Esri and OpenFreeMap (map tiles), and Wikipedia (short descriptions of nearby landmarks). These requests do not include your name, email or photos.
• Payments. If you buy a plan, payment is handled by Stripe. MulhimDesign never sees or stores your card or bank details. We keep your plan (type and dates) and a record of each payment (amount and date) with your account, to give you access and for accounts. See the Mulhim Lab terms.

Information collected automatically

• Visitor statistics. The site uses Cloudflare Web Analytics to count page views and see which pages are popular. It does not use cookies and does not identify individual visitors.
• Server logs. The site is hosted on Cloudflare. As with any website, Cloudflare processes technical data such as your IP address and browser type to deliver pages and protect the site from abuse.
• Content from other services. Fonts (Google Fonts), code libraries (jsDelivr, cdnjs, unpkg), images (Cloudflare R2, Unsplash) and map imagery (Esri ArcGIS) load from those providers. Your browser shares standard technical details such as your IP address with them when it requests these files.

Information stored on your device

• Your light/dark theme choice and your best score in the portfolio's mini game are saved in your browser's local storage.
• The "Datum" chat assistant runs entirely on your device. Your chat messages are not sent to any server, and they are cleared when you close the tab.
• To load faster and work offline, the site keeps a cached copy of pages and images on your device.

You can clear all of this at any time in your browser settings, or by clearing the app's storage in Android settings.

What we don't do

• No accounts on the portfolio itself; only Mulhim Lab tools ask you to sign in
• No advertising or advertising trackers
• No selling or renting of personal information
• No access to your contacts, camera, microphone or location. The app does not request these permissions.

Links to other sites

The site links to WhatsApp, Instagram, TikTok, Google Maps and email. Those services have their own privacy policies, which apply once you leave this site.

How long we keep information

Contact form messages are kept in MulhimDesign's email inbox for as long as needed to respond and to keep a record of the conversation. Mulhim Lab accounts are kept until you ask for yours to be deleted. You can ask for either to be deleted at any time.

Your choices and rights

You can ask to see, correct or delete any personal information you have sent us, in line with Malaysia's Personal Data Protection Act 2010. To make a request, email shahrulmulhim@gmail.com.

Children

This portfolio is intended for a general and professional audience. It is not directed at children under 13, and we do not knowingly collect their personal information.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new effective date.

Contact

Questions about this policy: shahrulmulhim@gmail.com