Skip to main content

Site-wide policy

Privacy Policy

Last updated: 3 May 2026

This privacy policy describes what data is collected when you visit any page on mghnasiri.github.io, including the homepage, CV, project pages, and any sub-project (such as the NHL Goal Predictor or PORID dashboard). The site is a personal academic portfolio operated by Mohammad G. Nasiri and is hosted on GitHub Pages free of charge.

What this site does not collect

The site has no user accounts, no login forms, no comment sections, no contact forms with stored submissions, no newsletters, and no input fields that store visitor-submitted data on our servers. We do not maintain a database of visitors or their browsing activity.

When you visit a contact page, the email address shown is a direct mailto link — sending an email creates a normal email message in your own email client and is governed by your own email provider's policies, not by this site.

What is automatically collected

GitHub Pages access logs

When your browser requests any page on this site, GitHub's servers log standard web request data: your IP address, browser user agent, the URL you requested, and a timestamp. These logs are retained by GitHub for security and infrastructure purposes. The site operator does not have direct access to these logs.

NHL public API requests

On project pages that fetch live data — most notably the NHL Goal Predictor dashboard — your browser makes direct requests to the public NHL API at api-web.nhle.com. These requests originate from your browser, so NHL servers see your IP address. The site operator does not control or share what the NHL does with these request logs.

Third-party services

Google Analytics 4

The site uses Google Analytics (GA4) to understand aggregate traffic patterns: total page views, country-level geography, device type, and which pages are most visited. GA4 sets cookies (named _ga, _gid, and similar) in your browser to distinguish unique visitors over time. We do not see individual visitor identities; the data is aggregated.

Google AdSense

The site may display advertisements served by Google AdSense to offset hosting costs. AdSense uses cookies and similar technologies (named __gads, __gpi, and similar) to deliver relevant ads. The data collected by AdSense includes:

For visitors in the European Economic Area, the United Kingdom, or Switzerland, AdSense will only set personalised-advertising cookies after explicit consent through the Google Funding Choices banner. For visitors outside these regions, ads may default to either personalised or contextual depending on local regulation.

Google's broader privacy practices are documented at policies.google.com/privacy. You can manage personalised advertising preferences across all of Google's services at google.com/settings/ads.

Bootstrap, Font Awesome, Google Fonts, JSDelivr CDN

The site loads CSS, fonts, and icons from public CDNs (Google Fonts, JSDelivr, Cloudflare, Font Awesome). These third parties may log standard web request data when your browser fetches the assets. Each provider operates under its own privacy policy:

Cookies and consent management

Consent for advertising cookies is managed by Google Funding Choices, an IAB-TCF v2 compliant Consent Management Platform. Visitors from regions with enforced consent requirements (EEA, UK, Switzerland, and other applicable jurisdictions) will see a consent banner on first visit allowing them to:

Categories of cookies that may be set after consent (where consent is required) or by default (in regions where opt-in is not legally required):

You can change or revoke your consent at any time by clicking the floating "Privacy options" link that Funding Choices adds to the page after your initial choice, or by clearing your browser cookies for this site and choosing differently when prompted again.

Your rights

Depending on your jurisdiction, you may have the right to:

Children's privacy

This site is not directed at children under 13 (or the equivalent minimum age in your jurisdiction) and does not knowingly collect personal information from them. If you believe a child has provided personal information through this site, please contact the operator.

Data retention

The site operator does not retain visitor data directly. Retention periods for third-party services follow each provider's own policies — Google Analytics retention is configured at the GA4 default (currently 14 months for event data); AdSense retention follows Google's standard policies.

Changes to this policy

This policy may be updated to reflect changes in the third-party services used, applicable law, or site features. The "last updated" date at the top of this page indicates the most recent revision. Substantive changes will be reflected in the timestamp and may be announced on the site's homepage.

Contact

For privacy-related questions or data-rights requests concerning this site, please reach out via the email address on the contact page. For requests concerning data held by Google (Analytics, AdSense), please use Google's privacy controls linked above — the site operator does not have access to that data.