Last updated: 20 September 2026
Hicarl is the personal portfolio and journal of Hafiz Haiqal. This page explains what information is involved when you browse the site, get in touch, or sign in to the private content studio.
When you get in touch
The contact form asks for your name, email address, and an optional message. These details are used to receive and respond to your enquiry. Please only include information you are comfortable sharing by email, and avoid passwords or sensitive personal details.
Your name, email, chosen topic, message, and read status are stored privately in Supabase so the site owner can respond from the studio Inbox. When email delivery is configured, a copy is sent through Resend to the site's contact mailbox; its delivery status is also recorded. A keyed hash of the request's IP address is used to limit repeated submissions. See Resend's privacy policy.
Browsing and hosting
You can read public posts and projects without creating an account. The hosting provider may process technical request information, such as an IP address, browser information, requested pages, and timestamps, to deliver the website and maintain its security and reliability. The hosted site uses Vercel; see Vercel's privacy notice.
The site does not currently include advertising pixels or a visitor analytics integration. Images loaded from external websites may expose your IP address and browser request information to the image host.
Signing in to the studio
The private studio uses Supabase for account authentication. Signing in involves your email address, password, and authentication session. Supabase's client stores session tokens in your browser's local storage to keep you signed in. Signing out clears the local session. See Supabase's privacy policy.
Blog, project, and About content is stored in Supabase. Drafts are available through the authenticated studio; published entries are visible to everyone. Deleting an entry removes it from the public site and marks the record as deleted for recovery. A private activity log records content changes, the signed-in editor, timestamps, and administrative content requests. Exported Markdown files remain wherever you choose to save them on your device.
Uploaded images and generated covers are stored in public Supabase Storage, including while the associated story is a draft. Image metadata is removed during processing. Removing an image from a story does not delete its stored file, which may be used elsewhere.
Service providers and external links
Hosting, authentication, form delivery, email, and external image providers may process information to perform their respective services. Their processing and storage locations may be outside your country. Links to LinkedIn, GitHub, and other websites take you to services with their own privacy practices.
Hicarl does not sell personal information or use contact messages for advertising.
Retention and your choices
Messages may remain in the contact mailbox, the private database, activity logs, and their backups. Authentication records remain with the authentication provider while the account is maintained, and deleted content may remain in the database, recovery copies, or repository history. Retention also depends on the relevant provider's settings and policies.
You can browse without signing in, choose not to submit the contact form, and clear browser storage through your browser settings. Clearing authentication storage will sign you out. You can request access to, correction of, or deletion of information you have shared by emailing mhafizh.work@gmail.com. Please identify the information concerned so the request can be located and your identity verified where necessary.
Security and updates
Access to the content studio requires authentication, and hosted connections use HTTPS. No online service can guarantee absolute security. Please contact the address below if you notice a privacy or security issue.
This page will be updated when the site's features or data practices change. The date above identifies the latest revision.
Contact
For privacy questions or requests, contact Hafiz Haiqal at mhafizh.work@gmail.com.