Privacy Policy

Last updated: July 4, 2026

This Privacy Policy explains how W Lithira Thulnith Weerasinghe ("I", "me", "my"), the owner and operator of this website (the "Site"), collects, uses, and protects information when you visit. I'm not a lawyer, and this policy is a good-faith, plain-language description of how the Site actually works technically — if you need this reviewed for a specific legal jurisdiction or use case, please consult a qualified professional.

1. Information I Collect

Depending on how you use the Site, I may collect:

• Usage & analytics data — page views, approximate location (country/region level, derived from IP address), device/browser type, referrer, and interaction events, collected via Google Analytics 4. (See Section 3).
• Security/anti-bot data — signals used by Cloudflare Turnstile to determine whether a visitor is a human or an automated bot (e.g. browser characteristics, IP address). Cloudflare processes this on my behalf; see their Privacy Policy.
• Newsletter signups — if you subscribe using the "Join my Newsletter" box, your email address is submitted directly to my newsletter provider, Kit. I may store your email address on my own servers as an backup. I do not sell or distribute your email addresses and private data with third-parties unless mentioned here — see Kit's Privacy Policy to know how Kit handle your information.

2. Analytics & Server-Side Tracking

This Site uses Google Analytics 4 (GA4). This is what is meant by "server-side tracking" on this Site: it improves the accuracy of visit statistics, including for visitors using tracker/ad-blocking browser extensions, since the request never has to reach a third-party analytics domain directly from your device.

A basic, non-identifying visit measurement happens regardless of your cookie-consent choice, using an ID that is not persisted beyond your current browser session (see the Cookie Policy for the technical detail). Once you click "Allow Cookies", a persistent identifier is used instead so GA4 can measure repeat visits more accurately. I do not sell analytics data, and I do not use it for advertising or cross-site tracking.

3. Cloudflare Turnstile (Bot Protection)

To protect the Site from automated abuse, an invisible Cloudflare Turnstile check runs in the background shortly after the page loads. If the check cannot confirm that you are a human after two attempts, access to the Site is temporarily blocked with an on-screen notice. Cloudflare processes limited technical data (such as your IP address and browser signals) to perform this check — see their Turnstile privacy information.

4. Cookies

Full detail on the specific cookies/storage used is in the Cookie Policy. In summary: essential storage for your consent choice, security cookies from Cloudflare Turnstile, analytics identifiers (session-only before consent, persistent after), and cookies set by Kit if you use the newsletter widget. No advertising cookies are used.

5. How Long I Keep Data

Contact form submissions and any correspondence are kept only as long as needed to respond to you and for reasonable record-keeping, after which they may be deleted. Aggregate analytics data is retained according to Google Analytics' standard retention settings. Other content in the database is retained until I update or remove it.

6. Third Parties I Use

• Cloudflare — bot protection (Turnstile).
• Google Analytics 4 — usage analytics, received via server-side Measurement Protocol.
• Kit — newsletter signup and delivery.

Each of these providers processes data under their own privacy policies; I encourage you to review them if you have specific concerns.

7. Your Choices & Rights

You can decline enhanced analytics by not clicking "Allow Cookies" and by clearing your browser's stored data at any time. Depending on where you live, you may have additional rights (e.g. access, correction, deletion) over personal data I hold about you — to exercise these, contact me using the details below.

8. Children's Privacy

This Site is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and I do not knowingly collect personal information from children.

9. Changes to This Policy

I may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision.

10. Contact

Questions about this Privacy Policy can be sent to wltweerasinghe@gmail.com.