Last updated 9 September 2026.
This site has no database and stores nothing about you. Contact messages pass through the server and land in my inbox. There is no analytics, no advertising, and no tracking of any kind.
I am Nicky Fang and this is my personal site. I am the data controller for everything described here.
The contact form asks for a name, an email address, an organization (optional), and a message. When you submit, the message is checked by Cloudflare Turnstile (below), handed to Resend for delivery (also below), and lands in my inbox. It is not written to any database on this site, because there is not one.
After that it sits in my email, the same way any message you send me would. I keep messages for as long as the conversation is useful and I delete them when it is not. If you want a message deleted sooner, ask and I will delete it.
There is no subscriber list on this site. Writing to me does not sign you up for anything, and I do not add contact-form senders to any list.
The contact form is protected by Cloudflare Turnstile, which checks that a submission comes from a person rather than a script. It runs in invisible mode, which means there is no checkbox, no puzzle, and no widget to see. It is worth saying that out loud, because a check you cannot see is still a check.
To do that, Turnstile receives information about your browser and your connection from your device. Cloudflare's use of that information is governed by the Cloudflare Turnstile Privacy Addendum. Cloudflare states that Turnstile does not use this information for behavioural advertising or to build a cross-site profile of you.
This site runs on Cloudflare Workers, so requests to it pass through Cloudflare's network. Their privacy policy is at cloudflare.com/privacypolicy.
Delivery is handled by Resend, an email API service. At the moment you press send, Resend receives the contents of your message — name, email address, organization, and the message itself — in order to deliver it to my inbox. That is the only reason it receives them, and it is the only way email sending works on a site with no mail server of its own.
Resend is a US company. Its privacy policy is at resend.com/legal/privacy.
There is no analytics on this site. I do not know how many people read a page, where they came from, or how long they stayed. There is no advertising and no advertising network.
This site sets no cookies of its own. Turnstile may set one while it runs its check, and Cloudflare's network may set one for security purposes. Neither is used to identify you across sites.
Fonts are loaded from Google Fonts, which means your browser makes a request to Google's servers when you open a page. That request includes your IP address. If that matters to you, a browser extension that blocks it will not break anything here: the site falls back to fonts already on your machine.
Singapore's Personal Data Protection Act gives you the right to ask what personal data I hold about you and how it has been used, and to ask me to correct it. If you are in the European Union or the United Kingdom, you also have rights of access, correction, erasure, restriction, and portability under the GDPR.
In practice the answer to "what do you hold" is short. If you have written to me, it is that message, and it is in my inbox. There is nothing else. Ask through the contact form and I will answer.
If what this site does with personal data changes, this page changes with it and the date at the top moves. The date at the top is the only version history there is, so it is kept honest.