Privacy Policy

Last updated: 16 October 2026

This policy explains what personal data this website (the "Site") collects, why, who it is shared with, and the choices you have. The Site is operated by Aghogho Meyoron, trading as MayR Labs ("I", "me", "my"), a sole practitioner based in Nigeria. For privacy questions or requests, write to youngmayor.dev@gmail.com.

I aim to collect as little as possible. There are no advertising trackers on the Site, and optional analytics only run if you accept them.

1. What I collect, and why

Where	Data	Purpose	Legal basis
Contact form	Name, e-mail address, subject, message, a salted one-way hash of your IP address, timestamp	To read and reply to your message; spam and abuse prevention	Your request / legitimate interest
Replies	The e-mail I send back to you	To answer you	Your request
Ask AI assistant	The questions you type (sent to an AI provider to generate an answer); a signed device cookie and a salted IP hash to count messages	To answer questions about my work; to cap usage and prevent abuse. Chat contents are not stored on my servers.	Legitimate interest; your request
Pay (payments)	Your e-mail address, amount, currency, payment reference and status. Card or bank details are entered on the payment provider's page and never reach this Site	To process and record a payment, issue receipts, keep accounting records	Contract; legal obligation
Captcha	A challenge token (and, if Cloudflare Turnstile is enabled, signals Turnstile uses to tell humans from bots)	To block automated spam	Legitimate interest
Analytics (optional)	Pseudonymous usage data such as pages viewed, approximate location, device and browser type, via Google Analytics with IP anonymisation	To understand how the Site is used	Your consent — loaded only after you accept
Error monitoring (optional)	Technical error details, URL, browser/OS	To find and fix bugs	Legitimate interest
Your device	Preferences (theme, wallpaper, icon positions), notes, game scores and similar data saved in your browser's local storage	To make the Site work the way you left it. This data never leaves your device.	Strictly necessary / your request
Administrator sign-in	Account identifiers handled by Clerk	Only for the site owner; visitors are never asked to sign in	Legitimate interest

I do not knowingly collect special-category data. Please do not include sensitive information in messages.

2. Who processes data on my behalf

The Site relies on carefully chosen service providers. Depending on how it is configured, they may process data as described above:

• Hosting & database (e.g. Netlify / Vercel / a PostgreSQL provider) — to serve the Site and store content, messages and payment records.
• Cloudinary — stores and delivers images and files I upload.
• Paystack — processes payments (its own privacy notice applies to card/bank data).
• Resend or an SMTP provider — delivers e-mails such as contact notifications and replies.
• AI provider (OpenAI-compatible or Anthropic) — receives your chat message and the public profile text to generate a reply.
• Cloudflare Turnstile (optional) — bot protection.
• Google Analytics (optional, consent only) and Sentry (optional) — analytics and error monitoring.
• Clerk — authentication for the administrator.
• Open-Meteo and wttr.in — when you use the Weather app or the terminal's weather command, your browser contacts them directly with the place you search (or your coordinates if you press "use my location" and grant permission).
• Gravatar, jsDelivr (Devicon icons) and Calendly (if enabled) — images, icons and the booking widget are loaded from their servers, which therefore see your IP address and browser details.

I do not sell your personal data and I do not use it for advertising.

3. International transfers

Providers above may process data outside Nigeria, including in the United States and the European Union. Where required, I rely on appropriate safeguards such as contractual clauses or the provider's certified frameworks.

4. How long I keep data

• Contact messages and replies: up to 24 months, or until you ask me to delete them.
• Payment records: up to 7 years, to meet accounting and tax obligations.
• Rate-limit counters and captcha tokens: minutes to hours; AI usage counters expire after about 24 hours (per-device quotas last as long as the cookie, up to 1 year).
• Analytics and error data: according to the provider's retention settings (by default no longer than 14 months).
• Local-storage data on your device: until you clear it.

5. Your rights

Under the Nigeria Data Protection Act 2023 and, where it applies to you, the GDPR / UK GDPR, you may request to: access your data; correct it; delete it; restrict or object to processing; receive a copy in a portable format; and withdraw consent at any time (without affecting earlier processing). To exercise a right, e-mail youngmayor.dev@gmail.com; I will respond within 30 days. You may also complain to the Nigeria Data Protection Commission or your local data-protection authority.

6. Security

Data is encrypted in transit (HTTPS). IP addresses are stored only as salted hashes. Administrative access is protected by Clerk authentication and an allow-list, and payment confirmations are verified server-side with the provider. No system is perfectly secure; if a breach affects you, I will notify you and the authorities as the law requires.

7. Children

The Site is not directed at children under 16, and I do not knowingly collect their data. If you believe a child has sent me personal data, contact me and I will delete it.

8. Cookies and similar technologies

See the Cookie Policy for the full list of cookies and browser storage and how to control them.

9. Changes

I may update this policy; the date above shows the latest revision. Material changes will be highlighted on the Site.

10. Contact

Aghogho Meyoron (MayR Labs) — youngmayor.dev@gmail.com