Privacy policy

What this site keeps

Reading the site asks nothing of you: no account, no analytics, no advertising trackers. What you send the team is kept to answer you, and never sold.

Last updated 25 September 2026

Who runs it

tasrif.io is Tasrif Khan's site, and admin.tasrif.io is the editor his team runs it from. The team answers anything about this policy, or about what you have sent.

Just visiting

Reading the site needs no account, and there are no analytics or advertising trackers.

Your browser keeps three small things for you:

  • tk_locale, a cookie set when you choose English or Bangla, so the next page opens in that language. It lasts a year.
  • tk_motion, in your browser’s storage, if you turn animation off. It never leaves your device.
  • tk-cart, in your browser’s storage, holding your shop cart between visits. It is sent only as part of an order you place.

Like every website, this one is delivered by servers that see your IP address and browser details to deliver each request and protect the site: Cloudflare in front, and Hetzner, where it is hosted.

Writing to the team

The contact and booking forms send your name, your email or phone number, your message and your answers to the form’s questions. They go to the team’s inbox, a database Supabase runs for it, and are used to read and answer you.

If you gave an email address, a reply with your reference is sent to it, and the team is told of your message by email. Both go through Resend, an email delivery service.

When a form is sent, your IP address is counted for ten minutes to hold back spam. It is not saved with what you sent.

Ordering from the shop

An order sends your name, phone number, city and address, your email and a note if you add them, and what you ordered. It is kept in Sanity, the system the site is run from, and used to call you to confirm, to deliver, and to keep a record of the sale.

If you add an email, you get a receipt, and word when the order is confirmed, sent, delivered or cancelled. These emails go through Resend too.

There is no online payment. The site never asks for card or bank details.

Signing in with Google

Sign-in is for the editor at admin.tasrif.io. The public site has none.

If you choose Google sign-in, Google shares your account identifier, email address and basic profile information, such as your name and profile picture, with our authentication provider, Clerk. These details identify your account and establish a sign-in session. Signing in does not automatically give you editor access.

The sign-in connection requests only your basic profile and email. It does not request access to your Gmail messages, Google Drive files, contacts or calendar. Your Google password is entered with Google and is not shared with this website.

Signing in uses cookies and browser storage to keep you signed in and protect your session. Clearing them signs you out.

You can remove the Google connection through your Google account connections. Removing it does not itself delete records already held by the site.

Other services

Some things on the page come straight from other services, which see your IP address when your browser fetches them:

  • Videos and their pictures, from YouTube in its privacy-enhanced mode (youtube-nocookie.com). The song section starts a video as you reach it.
  • The travel map’s tiles, from OpenFreeMap.
  • Photographs, from Sanity’s image service.

Links out — YouTube, Spotify, Facebook, Instagram, WhatsApp — take you to those services, under their own privacy policies.

Sharing and keeping

Nothing you send is sold or used for advertising. Supabase keeps messages, Sanity keeps orders, Clerk handles sign-in and Resend sends the emails, each for the team. Only team members given access see what they need to answer you and run the site.

Messages and orders are kept while the team needs them to answer you, deliver, and keep its records. Ask, and they are deleted.

Your choices

Write to the team, or use the contact page, to see, correct or delete anything held about you. Say enough to find it — accounts, messages and orders are kept apart — and never send a password.

To clear what your browser keeps, remove this site’s cookies and storage in your browser’s settings.

If what the site keeps changes, this page changes with it, and so does the date at the top.

Write to the team[email protected]