Privacy

I'm Mayantha Jayasinghe. I shoot film and stills and build the digital systems around them, and I do it as one person in Dubai, United Arab Emirates - not a company. This site is mine, so this policy is written in the first person. It covers mayantha.net and the Chrome extensions I publish, which are listed further down.

If anything here is unclear, or you want to know what I hold about you, email me at hey@mayantha.net and I'll answer honestly.

What I collect

There's one place on this site where you can hand me personal data on purpose: the contact form. It asks for your name, your email address, and - optionally - a message about your project. That's the whole list.

When you submit it, the form is emailed straight to my inbox through Cloudflare Email Routing. It isn't stored in a database, because this site doesn't have one. Your enquiry sits in my email until I delete it, and I use it for exactly one thing: replying to you. I don't sell it, I don't add you to a marketing list, and I don't pass it to anyone else.

The contact form also runs Cloudflare Turnstile, which checks that a submission came from a person rather than a bot. It's a security measure, and it's the reason the form isn't buried in spam.

Analytics

I use Cloudflare Web Analytics to see whether anything I publish is working. It's cookieless and aggregate: page views, where visits came from, browser and country-level information, and how fast pages load.

It doesn't set cookies, it doesn't fingerprint you, and it doesn't follow you to other websites. I can see that a page got traffic from a country. I can't see who you are, and no individual can be identified from it.

Hosting and server logs

The site runs on Cloudflare's network. Cloudflare processes the requests that load these pages and may keep standard security and server logs, which include IP addresses, for security and abuse prevention.

Films embedded from YouTube

The films on /film are hosted on YouTube and embedded through youtube-nocookie.com, behind click-to-load facades. Until you click play, nothing loads from YouTube and no YouTube cookies are set - you're just looking at a still frame I served.

If you do click play, the player loads and Google and YouTube's own privacy policy applies to that playback. That part is out of my hands, which is exactly why it waits for you to ask for it.

My Chrome extensions

I publish four browser extensions: UTM Forge, Meta Preview, Type Inspector and Palette Grab. None of them collect, transmit or sell any data about you. There is no account, no analytics, no tracking and no server behind any of them - I could not see what you do with them even if I wanted to.

None of the four request host permissions, so none has standing access to any site. Three of them read the page you are looking at only after you click their toolbar icon, using the activeTab permission - that grant covers one tab, exists because you asked for it, and lapses when you navigate away. Whatever they read is used to draw the popup and is discarded when the popup closes.

UTM Forge is the only one that stores anything, and it stores it on your own machine. The presets and recent links you save live in Chrome's local extension storage, never leave the browser, and are deleted if you uninstall it. It has no access to any web page at all.

None of them fetch code at runtime, and none load fonts or scripts from anywhere else - everything they run ships inside the extension. UTM Forge, Type Inspector and Palette Grab make no network requests at all.

Meta Preview makes exactly one, and it is worth stating plainly: to show you the preview card, it loads the page's own preview image from wherever that page says the image lives. That is the same request your browser already makes when the page renders that image itself, and it is sent with no referrer attached. Nothing about you is sent with it, and nothing is sent to me.

If you would rather check than take my word for it, every permission each one asks for is listed on its Chrome Web Store page, and there are only ever one or two.

Cookies

This site sets no advertising, marketing, or tracking cookies. None. The only things in play are strictly-necessary security functionality (Turnstile) and analytics that don't use cookies at all.

That's why you didn't get a cookie consent banner on the way in. There's nothing to consent to.

Who else is involved

Two companies, named plainly, plus one that only shows up if you press play:

• Cloudflare - hosting, cookieless analytics, email routing for the contact form, and bot protection.
• Google (Gmail) - where my email is delivered, so anything you send me lands there.
• YouTube - only when you click to play an embedded film.

Your rights

You can ask me what personal data I hold about you, ask me to correct it, or ask me to delete it. Email hey@mayantha.net and I'll sort it out.

In practice this is simpler than it sounds: the only personal data I hold is our email correspondence, so deleting it means deleting those emails.

How long I keep things

Enquiry emails stay in my inbox for as long as the conversation and any work that comes out of it needs them. After that I delete them. I don't archive enquiries forever on the off-chance.

Children

This site isn't directed at children under 16, and I don't knowingly collect data about them.

Changes

If what I do changes, I'll update this page and change the date on it. The date shown here is the last time anything on this page changed.