Legal & Compliance

Legal Hub

Last updated: June 2025 · All policies for rashal.portfolio

This page is a central reference for all legal, privacy, accessibility, and trust information for this website. Individual policy pages are linked below.

Policy pages

Privacy Policy — what data is collected, DPDP Act 2023 rights
Terms & Conditions — use of this site, intellectual property, disclaimers
Cookie Policy — cookies, local storage, Google Fonts
Refund & Return Policy — no transactions on this site

Cookie consent

This site does not set first-party cookies and does not use analytics or advertising networks. The only third-party request is Google Fonts, which may set cookies as part of its CDN.

Because no consent-requiring cookies are set by this site directly, a cookie consent banner is not legally required under current Indian law (DPDP Act 2023). If analytics or advertising are added in the future, a consent mechanism will be implemented before those scripts are loaded.

Form consent & data minimisation

This site currently has no contact form. The only way to contact Rashal is via direct email. When you email, you voluntarily provide your email address and message — no additional data is collected.

If a contact form is added in the future, it will:

Only collect name and email (minimum necessary data)
Include a clear privacy notice at the point of submission
Not pre-tick any consent checkboxes
Not subscribe users to mailing lists without explicit opt-in

Tracking, analytics & third-party scripts

This website does not use:

Google Analytics, Plausible, Fathom, or any analytics platform
Facebook Pixel, TikTok Pixel, or any advertising tracking
Hotjar, FullStory, or any session recording tools
Any third-party chat widgets or support tools

The only external script loaded is Google Fonts via a stylesheet link. No JavaScript is loaded from third-party domains.

Third-party embeds

This site does not embed YouTube videos, Google Maps, social media widgets, or any other third-party iframes. All content is self-contained.

DPDP Act 2023 — India

India's Digital Personal Data Protection Act 2023 requires that personal data be processed lawfully, with consent where required, and only for specified purposes.

This site's compliance position:

No personal data is directly collected or stored by this site
Google Fonts is the only third-party service that may process visitor IP addresses — this is disclosed in the Privacy Policy
Email correspondence is handled via Microsoft Outlook — governed by Microsoft's privacy terms
No data is shared with, sold to, or processed by any data broker or advertiser
Users may contact RashalWeb@outlook.com to exercise any rights under the DPDP Act

Accessibility & WCAG

This site aims to meet WCAG 2.1 Level AA guidelines. Measures taken include:

Semantic HTML5 landmarks (nav, main, section, footer) with ARIA labels
All decorative icons and canvas elements marked aria-hidden="true"
Keyboard-navigable links and buttons throughout
Custom cursor disabled on touch/keyboard devices (@media (pointer: fine))
All animations disabled for users with prefers-reduced-motion enabled
Sufficient colour contrast on primary text (white on dark background)
No auto-playing audio or video
No content that flashes more than 3 times per second

Known limitations: skill percentage bars are visual only and do not have screen-reader text values. This will be addressed in a future update.

To report an accessibility issue: RashalWeb@outlook.com

Alt text for images

This site currently uses a CSS background image (nwbg.jpeg) which is purely decorative and does not require alt text. Project thumbnails use emoji characters as decorative placeholders — these are marked appropriately. No meaningful images are present without text alternatives.

Colour contrast

Primary body text is white (#ffffff) on a dark background (#0a0a14), which exceeds the WCAG AA contrast ratio of 4.5:1. Secondary text uses rgba(255,215,0,0.75) (gold) on dark — this meets AA for large text. Some muted labels (rgba(255,215,0,0.45)) are used for decorative/supplementary text only and are not relied upon to convey essential information.

Reviews, testimonials & claims

This site does not display any customer reviews or testimonials. The guestbook feature that previously appeared on this site has been removed as it contained fabricated entries.

Skill proficiency bars are subjective self-assessments. They are not certifications, test scores, or third-party verified ratings.

Image copyright & licensing

The following assets are used on this site:

nwbg.jpeg — background image. You must ensure you own this image or have a valid license for web use. If sourced from a stock site, verify the license permits use on a public website.
Baunk font (Baunk.woff2, Baunk.ttf) — a custom font loaded via @font-face. Verify you hold a license that permits web embedding and public distribution. Many free fonts require a specific web license.
Edu QLD Hand — loaded from Google Fonts under the SIL Open Font License, which permits free use including on websites.

HTTPS & security

This site should be served exclusively over HTTPS to protect visitors from man-in-the-middle attacks. Most static hosting providers (GitHub Pages, Netlify, Vercel) enforce HTTPS automatically.

Security measures implemented in the code:

All external links use rel="noopener noreferrer" to prevent reverse tabnabbing attacks
No user input is accepted or processed by this site (no forms, no search)
No inline event handlers or eval() usage in JavaScript
No credentials, API keys, or secrets are present in the source code

Recommended: add a Content Security Policy (CSP) header via your hosting provider to restrict which domains can load resources.

Dark patterns & misleading consent

This site does not use dark patterns. Specifically:

No pre-ticked consent checkboxes
No hidden subscription sign-ups
No fake urgency or scarcity messaging
No misleading "Accept All" vs. "Reject" button asymmetry (no cookie banner needed)
No fake visitor counters or fabricated social proof (previously present visitor counter has been removed)
The "Available" status in the About section reflects genuine availability — update this if your availability changes

Business & contact details

This is a personal portfolio, not a registered business. No company registration number, GST number, or registered address is applicable.

Contact: RashalWeb@outlook.com

If this site is used to offer freelance services commercially in India, you may need to register under applicable GST rules if annual turnover exceeds the threshold. Consult a qualified accountant or legal advisor.