Legal
Privacy Policy
Last updated: 2026-06-02
Who we are
DexonDev is a Supabase consultancy founded by Ahmad Hazim and operated from Malaysia. This policy explains what personal data we collect when you visit dexon.dev, why we collect it, and the rights you have over it.
Contact for any privacy question: [email protected].
What we collect
- Contact form data. When you submit the form on /#contact, we collect the name, email, and message you enter. This is sent to our Cloudflare Worker (
worker.dexon.dev) which relays it as an email to us. - Analytics (consent-based). If you accept analytics cookies, we load Google Analytics 4 which records pseudonymous data: pages viewed, referrer, approximate location (city level), device type, and session duration. We configure GA4 with IP anonymisation enabled.
- Marketing (consent-based). If you accept marketing cookies, we load Meta Pixel which lets us measure conversions from our Instagram and Facebook ads and show you relevant ads later.
- Server logs. Our hosting provider (Cloudflare Pages) keeps short-lived edge logs containing IP addresses for security and abuse prevention. These are retained per Cloudflare's standard retention.
Why we collect it
- To reply to you. Contact form submissions are processed solely to respond to your enquiry. Legal basis: legitimate interest (responding to a direct request) or consent (you initiated the message).
- To understand what content helps. Analytics tell us which blog posts and landing pages bring value so we write more of what works. Legal basis: your consent.
- To improve our advertising. Marketing pixels let us measure ad performance and show our ads to people likely to be interested. Legal basis: your consent.
Third parties we share data with
- Cloudflare — hosting and DNS for the site and worker.
- Google (GA4) — analytics, only with your consent.
- Meta (Pixel) — advertising measurement, only with your consent.
- Email relay (worker.dexon.dev) — delivers your contact form message to our inbox.
We do not sell personal data to anyone. We do not share contact form submissions with any party other than what is required to deliver the email.
How long we keep it
- Contact emails: as long as the conversation is active, then archived. You can ask us to delete them at any time.
- Analytics data: GA4's default 14-month retention.
- Marketing pixel data: per Meta's standard retention.
- Server logs: per Cloudflare's standard retention (typically days, not months).
Your rights
Depending on where you live, you have rights to access, correct, export, or delete the personal data we hold about you, and to object to or restrict processing. These rights come from:
- GDPR / UK GDPR — for EU and UK residents (Articles 15–22).
- Malaysia PDPA 2010 — for Malaysian residents.
- CCPA / CPRA — for California residents.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
Cookies
For a full breakdown of the cookies we use and how to control them, see our Cookie Policy. You can change your preferences at any time using in the footer.
Changes to this policy
We may update this policy as the site evolves or as we add new tools. Material changes will be flagged on the homepage or via the consent banner. The “Last updated” date at the top of this page reflects the most recent revision.