The short version. This is my personal portfolio. There are no cookies, analytics, ads or trackers here. If you write to me, I use your message only to reply and to work with you, and I never sell it or use it for advertising.
Who runs this site
This website is run by Fadlan Amada, an independent music composer, producer and graphic designer in Indonesia. I am the person responsible for your personal data here (the "controller" in data protection law). You can reach me at fadlanamada@gmail.com.
What I collect, and why
- The contact form. Your name, email address, the topic you choose and your message. I use them to read and answer your message and, if we decide to work together, to plan and do that work.
- Email. Whatever you write when you email me, for the same reasons.
- Downloads. The free products are delivered by Gumroad, which gives me, as the seller, your name and email address so I can deliver the product and help you with it. If a Google Drive folder asks you to "Request access", Google shows me the name and email of your Google account, which I use only to give you access.
- Visiting a page. Like every website, the server that delivers a page sees your IP address, your browser type and the page you asked for. My host, Cloudflare, uses this to deliver the site and protect it from attacks. I only see totals, such as visits per day and per country, never who you are.
Please don't send me sensitive details such as ID numbers, health information or passwords. I don't need them.
What I don't do
- No cookies of my own, so there is nothing to accept and no cookie banner.
- No analytics, tracking pixels, ads or fingerprinting.
- No accounts, no sign-ups and no newsletter.
- I don't sell, rent or trade your personal data, and I don't use it for advertising.
The only cookie this site can set belongs to my own admin login, which visitors never use. If Cloudflare suspects an attack, it may show a short security check that sets a security cookie; that cookie is strictly necessary and does not track you.
Saved in your browser
The music player remembers your volume, mute, shuffle and repeat choices in your browser (local storage), so they stay the same from page to page. They never leave your device. You can remove them any time by clearing this site's data in your browser.
Videos and players from other sites
Some pages show a YouTube video or a Spotify or Apple Music player. They only load when you tap them. Before that, the only thing fetched from another company is the preview picture of a YouTube video, which comes from YouTube's image server and so shows YouTube your IP address.
Once you tap one, that service runs inside the page, and its own privacy policy and cookies apply: YouTube (Google), Spotify, Apple. YouTube videos use YouTube's privacy-enhanced mode.
Everything else, including the fonts, comes from this site itself.
Kolotik Mobile
Kolotik Mobile plays its sounds inside your browser. In Shake mode it reads your phone's motion sensor, only after you allow it, and only to play notes. Nothing is recorded or sent anywhere.
Services I use
- Cloudflare (United States, servers worldwide): hosts and protects this website. Privacy policy
- Web3Forms (India): delivers the contact form to my inbox. It keeps a copy of each message for up to three years and checks it for spam, which can include your IP address and email address. Privacy policy
- Google (Gmail and Google Drive, United States): my email inbox, where messages are kept, and some downloads. Privacy policy
- Gumroad (United States): delivers the free downloads. Privacy policy
These services may store data outside Indonesia, including in the United States, the European Union and India. I use established services that protect the data they hold, and each one gets only what it needs for its job.
Links to Fiverr, LinkedIn, X, streaming services and other sites take you to places with their own privacy policies.
The legal basis
Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and, where they apply, the EU and UK GDPR:
- Replying to you and working with you: steps you asked for before an agreement, and carrying out that agreement.
- Keeping the site running and safe: my legitimate interest in a secure website.
- Records of paid work: my legal obligations, such as tax records.
How long I keep it
- Messages and emails: if we don't work together, I delete them within two years of our last contact. If we do, I keep them while the project needs them, and the records tax law asks for as long as it asks (in Indonesia, up to 10 years).
- Web3Forms' copy: up to three years, under its own policy.
- Cloudflare's technical logs: a short time, under Cloudflare's policy.
- Player settings in your browser: until you clear them.
Your rights
You can ask me to:
- tell you what personal data I have about you, and send you a copy;
- correct or complete it;
- delete it, or stop using it;
- limit how I use it, or object to it;
- withdraw any permission you gave.
Write to fadlanamada@gmail.com. I will reply within 3 x 24 hours, as Indonesian law asks, and I may ask you to confirm the request comes from your own email address.
If you think I've handled your data wrongly, please tell me first so I can fix it. You can also complain to a data protection authority: in Indonesia, the authority set up under Law No. 27 of 2022 (until it exists, the Ministry of Communication and Digital Affairs, Komdigi); in the EU or EEA, your national authority; in the UK, the Information Commissioner's Office.
Children
This site isn't made for children. If you're under 18, please ask a parent or guardian before you send me your details, or ask them to write to me for you. If I find out I received a child's details without that permission, I'll delete them.
Keeping it safe
The whole site uses a secure (https) connection. I keep no database of visitors. Messages are kept in a password-protected email account. If a data breach ever affects your details, I'll tell you within 3 x 24 hours of finding out, and the authority too where the law requires it.
Do Not Track
I don't track you, so there is nothing for a "Do Not Track" or "Global Privacy Control" signal to switch off.
Changes
If this policy changes, the new version goes on this page with a new date at the top.
This policy is also in Bahasa Indonesia. Both say the same thing; if they ever differ, the Indonesian version applies to people in Indonesia.