Privacy Policy

This page explains what data TnRomy.com collects, why, and what you can do about it. It is written to satisfy the EU General Data Protection Regulation (GDPR) and the UK equivalent.

Who is responsible

Romi Fadli, S.Kom. operates this site as a personal portfolio. For any question about your data, contact: inside@tnromy.com

What is collected

Four categories, and they are treated very differently.

Server logs — always

Every web server records requests. This one keeps the requested address, timestamp, HTTP status, and a truncated network address, for a short period, to keep the site running and to investigate faults. This is necessary for operating the service and is not used to build a profile of you.

Site statistics — this site's own, without cookies

When a page is shown in your browser, a small script tells this site which page it was, the referring site, any utm_ campaign tags, your screen width (to tell phone from desktop), and, when you leave, how long the page was actively visible. The server derives your browser family, operating system, and country from the request, and counts unique visitors with a one-way hash of your IP address and browser user agent combined with a random value that changes every day and is deleted afterwards — so the hash cannot be reversed and today's visit cannot be linked to tomorrow's. Your IP address is never stored, no cookie is set, nothing is written to your device, and no device fingerprinting is used. Bots and link previews are not counted.

Only if you press Agree: the site also sets one first-party cookie, tv_id, holding a random identifier, so that a return visit on another day is recognised. It lasts 13 months from the day it is set and is not extended by later visits. Declining, withdrawing consent, or a browser that sends Global Privacy Control removes it on your next page.

Country is looked up locally in the free DB-IP database; your address is not sent anywhere. IP Geolocation by DB-IP.

The same country lookup picks the language an article opens in when its address does not name one: Indonesian for visitors from Indonesia, English for everyone else. That choice is made for each page and is not recorded.

Google Analytics — only if you agree

If you press Agree on the banner, this site loads Google Analytics 4 to see which pages are read. If you press Decline, or simply never answer, no analytics script is loaded at all and no request is made to Google.

When enabled, Google Analytics records pages visited, approximate region, device and browser type, and a randomly generated identifier stored in your browser. It does not receive your name or email.

Email subscription — only if you ask

If you enter your address in a subscribe form, this site stores that address, the date, and which page you submitted it from. Nothing else is stored, and the address is used for one purpose only: telling you when a new post is published.

An address is recorded as pending until it is confirmed, because anyone can type someone else's address into a public form. Unconfirmed addresses are never sent anything other than that single confirmation request.

Legal basis

Site statistics without cookies

Legitimate interest in knowing which pages are read (GDPR Art. 6(1)(f)), limited to aggregate audience measurement on this site only, never shared or combined with other data.

The tv_id cookie and Google Analytics

Your consent (GDPR Art. 6(1)(a)). You may withdraw it at any time, and withdrawing is as easy as giving it.

Email subscription

Your consent (GDPR Art. 6(1)(a)), given by submitting the form and confirmed by email. You may withdraw it at any time.

Server logs

Legitimate interest in operating and securing the site (GDPR Art. 6(1)(f)).

Who receives the data

Subscription addresses stay on the machine that serves this site and are never sold, shared, or used for anything other than notifying you of new posts.

This site's own statistics stay on the machine that serves it and are never shared.

Google Analytics data is processed by Google. This may involve transfer outside the European Economic Area, covered by the European Commission's Standard Contractual Clauses and Google's data processing terms. Server logs stay on the machine that serves this site and are not shared.

How long it is kept

A subscription address is kept until you unsubscribe. An address that is never confirmed is removed rather than kept indefinitely — keeping an address nobody confirmed serves no one.

Server logs are kept only as long as needed to investigate faults. This site's own statistics are kept as individual page views for 13 months, then deleted; only daily totals per page are kept after that. Google Analytics data follows the retention period configured in Google Analytics.

Your rights

Under GDPR you may request access to your data, correction, erasure, restriction of processing, portability, and you may object to processing. You may also complain to your national data protection authority.

Because analytics identifiers are random and not linked to your name, identifying your specific analytics records usually is not possible — which is itself a form of protection.

A subscription address is different: it identifies you directly, so those rights are straightforward to exercise. Write to the contact address on this site and your address will be removed.

Cookies and local storage

Two things are stored in your browser's local storage, both of them your own settings: your light/dark theme preference, and your answer to the analytics banner. Neither is sent to any server. Only after you agree, this site sets the tv_id cookie described above and Google Analytics sets its own cookies.

If you pick a language with the language switcher on an article, the site remembers it in a cookie, tv_lang, holding only id or en, for one year, so the next article opens in that language. It is a setting you chose, not an identifier, so it does not wait for the analytics banner. Clearing your cookies removes it.

Withdrawing consent

Press the button below. Your answer is recorded as declined, the tv_id cookie is removed on the next page, and the page reloads without Google Analytics. You can change your choice again at any time from the Analytics choice link at the bottom of every page.

Withdraw consent

Changes to this policy

Material changes will be reflected in the date at the top of this page.