Privacy
Last updated: 5 September 2026.
This is Nikan Moghadam’s personal website. For privacy questions or to exercise your rights, email hello@nikan.me.
Hosting and contact
Firebase Hosting, a Google service, delivers the pages and images. Requests necessarily disclose an IP address and technical request information to the hosting provider. This processing supports reliable delivery and abuse prevention, on the basis of legitimate interests under Article 6(1)(f) GDPR. Google states that Firebase Hosting retains IP data for a few months; see Firebase privacy information.
If you email me, I use your address and message to respond, on the basis of my legitimate interest in handling correspondence. I keep correspondence only as long as needed for that purpose or any applicable legal retention obligation.
Optional analytics
Only after you select Accept, this site loads Google Analytics 4 to understand which pages visitors open, where they arrive from, their sequence of pages, engagement time and outbound link clicks. It uses browser and session identifiers stored in _ga and _ga_R1B8G83P9C cookies. These associate visits with a browser; they do not tell me your name. Technical browser information and approximate location may also be processed. The website sets an analytics cookie lifetime of 60 days without renewing it on each page visit; your browser may clear cookies sooner.
The legal bases are your consent under Article 6(1)(a) GDPR and §25(1) TDDDG. Analytics is optional and is not needed to read the site. There are no advertising tags in this implementation; Google Signals, ads personalization and granular location/device collection are disabled. Page and referrer URLs sent by the site omit query strings and fragments. Google’s email and selected sensitive-query-parameter redaction provide additional protection, but are not a guarantee against every form of personal data in URLs.
Google Analytics currently retains event-level data for two months and user-level data for 14 months, without resetting retention on new activity. Aggregated reports are not subject to these same retention limits. See Google’s retention explanation.
You can select Reject, ignore the panel, or withdraw acceptance through Analytics settings in the footer at any time. Withdrawal stops future measurement and attempts to clear this site’s Analytics cookies. It does not change the lawfulness of earlier processing. The consent cookie nikan-me-analytics-v2 remembers your choice for up to 180 days. A local session-storage fallback remembers a refusal in the current tab if cookie writes fail. This preference storage is used to respect your choice (§25(2)(2) TDDDG).
Page indicators
The navigation remembers page paths in this browser’s local storage so it can distinguish visited pages from unread pages. This feature does not send your reading history to me or Google. It remains until the browser clears site data. You can clear it through your browser’s site-data settings. It is separate from optional Analytics.
Providers and international processing
Google services may process data outside the EEA, including in the United States. Google Ireland Limited and Google LLC, and their service providers, may receive data in providing these services. Google describes applicable transfer safeguards, including the EU–US Data Privacy Framework for certified US entities and standard contractual clauses where applicable, in its data-transfer information. See also how Google uses information from sites using its services.
Ordinary links to LinkedIn, Instagram, GitHub and other sites take you to those providers only when followed; their own privacy notices then apply.
Your rights
Where applicable, you can request access, correction, deletion, restriction and portability of your personal data, object to processing based on legitimate interests, and withdraw consent. You can also complain to a data protection supervisory authority, including the Bavarian State Office for Data Protection Supervision. Providing data for Analytics or email contact is voluntary. This site does not make decisions about you through automated profiling with legal or similarly significant effects.