Privacy Policy

Last updated 3 September 2026

This is a showcase site. It has no accounts, no forms and no shopping cart, so there is nothing here for you to give us. Nothing on it sets a cookie. Two things still see you arrive: our own analytics, which runs on our server and plants nothing in your browser, and Google Fonts, which serves the typefaces.

Who we are

This website, www.sunflowerslw.tech, is operated by DUOCODE TECHNOLOGY, a sole proprietorship registered in Malaysia under registration number LA0087244-A. Under the Personal Data Protection Act 2010 (PDPA) we are the data user for this site.

Write to us at duocodetechu@gmail.com about anything on this page.

A Bahasa Malaysia version of this notice is published at Notis Privasi, as section 7(2) of the PDPA requires. The two say the same thing. If they differ, this English version prevails.

What this policy covers

This policy covers this website only. The products listed here — each of which opens on its own domain — are separate services with their own privacy policies and their own data practices. Nothing on this page tells you how any of them handles your data; read the policy on the product you actually use.

What we do not collect

This site is a set of static pages. There is no sign-in, no account, no contact form, no newsletter, no comment box, no file upload, no search box and no payment. There is no server-side code of ours running anywhere. So:

  • We never ask for your name, email address, phone number or payment details, and we have no way to receive them except by ordinary email if you choose to write to us.
  • No cookie is set by this site or by anything it loads — not by us, not by the analytics, not by the fonts. Nothing is written to your browser's local storage or session storage either.
  • There are no advertising or retargeting pixels, no session recording or heatmap tools, no chat widget, and no embedded social, video or comment widgets.
  • We do not sell, rent or trade data about you. There is no mailing list to be added to.

Analytics

Every page loads Umami, an open-source analytics tool that we run ourselves on our own server, so that we can see which pages people read. It is a small script served from fluentdojo.com/umami — our machine, not a third party's — and it is cookie-less. It sets nothing in your browser and stores nothing there. The only thing it reads from your browser is one opt-out flag, described below.

When you open a page, the script sends our server:

  • the address and title of the page you are on, and the site it belongs to;
  • the page or search that referred you;
  • your screen size and your browser's language setting.

Our server also sees what every web server sees when a browser talks to it: your IP address and your browser's user-agent string. From those, Umami derives an approximate country and a device, browser and operating-system label. It identifies a visit by a value it computes on the server, not by any identifier planted on your device — so there is nothing in your browser that follows you from one visit to the next, and nothing that follows you to any other website.

The server is ours: an AWS machine in Singapore that also runs FluentDojo. The data is not shared with Google or any other analytics company, is not used for advertising, and is not combined with anything else. We look at the aggregate counts; we do not attempt to identify individual visitors, and we have no means to do so.

Because nothing here stores anything on your device, this site shows no cookie banner. There is no cookie to consent to.

Google Fonts

The pages use two typefaces, Space Grotesk and Space Mono, loaded from fonts.googleapis.com and fonts.gstatic.com rather than from our own server. Your browser makes those requests directly, which tells Google your IP address and browser user-agent string. No cookie is set by them.

Hosting and server logs

The site is hosted on Vercel. Like any web host, Vercel's servers record standard request information — IP address, timestamp, requested path, user-agent — for delivery, performance and abuse prevention. That logging is Vercel's, under its own terms; we operate no additional logging of our own beyond the analytics described above.

Where your data goes

The analytics data stays on our own server in Singapore — outside Malaysia, but not in anyone else's hands. Google (fonts) and Vercel (hosting) are United States companies operating global infrastructure, so what they see is processed outside Malaysia too. Using this site means accepting those transfers. If that is not acceptable to you, the next section is the remedy, and it is complete — the site works fully without any of it.

How to say no

Nothing here waits for your consent, because nothing here stores anything on your device. You can still switch the analytics off, and the site will look and work exactly the same:

  • set umami.disabled to 1 in this site's local storage — Umami checks that flag on every page and sends nothing while it is set (in your browser's developer console: localStorage.setItem('umami.disabled', 1));
  • use any tracker-blocking extension, or a browser that blocks trackers by default;
  • turn off JavaScript — the pages are static HTML and remain readable;
  • to avoid Google Fonts as well, block fonts.googleapis.com and fonts.gstatic.com; the pages fall back to your system typefaces.

We do not honour the browser "Do Not Track" signal, because we have not enabled that option on the analytics — we would rather say so than let you assume otherwise. Any of the measures above works regardless.

Your rights under the PDPA

Malaysian law gives you the right to ask what personal data we hold about you, to have it corrected, to withdraw consent to its processing, and to limit how it is processed. Send any such request to duocodetechu@gmail.com.

We should be honest about what we can actually do. The analytics data described above is not tied to your name or email address, and there is no identifier stored on your device that you could quote to us, so if you write to us we will normally have no way to find your records among it. Switching the analytics off, as described above, is the effective remedy, and it takes effect immediately. If you have emailed us directly, that correspondence sits in our mailbox and we can of course delete it on request.

Children

This site is not directed at children, and we do not knowingly collect anything from them. It contains no content requiring an age gate.

Changes

If what the site does with visitor data changes, this page changes with it and the date at the top moves. There is no notification list to be on; the date is the record.