This site is run by me, Mohammed Diea Eddine, a performance marketer based in Doha, Qatar. When this page says "I", it means me. Questions or requests: contact@diea.digital.
What I collect and why
When you send an inquiry. Your name, email, company, budget range and message, so I can answer you. With it I keep where you first came from: the campaign tags in the link (utm_source and the rest), ad click IDs (gclid, fbclid, ttclid, msclkid), the referring site, the first page you landed on and when. That tells me which of my own marketing works.
When you sign in or buy. Your email address and name for your account, and your orders: what you bought, the amount, and the files you can download. Sign-in runs on Google's Firebase Authentication: with your Google account, or a one-time code sent by email. There are no passwords.
To stop abuse. Your IP address is used to limit how often a form or sign-in can be tried. For the inquiry form it is stored only as a one-way hash, with a counter that resets every hour. The inquiry form also runs Cloudflare Turnstile, which checks your browser for signs of a bot. Cloudflare sees your IP address and browser details for that check.
Server logs. My host keeps standard request logs (address, page, time) for running and securing the site.
Cookies
The site sets one cookie, __session, and no advertising or analytics cookies. It holds up to three things:
- where you first came from (the tags and click IDs above), kept 90 days, so an inquiry can be credited to the right campaign;
- what is in your cart, kept 30 days;
- your sign-in, kept 14 days or until you sign out.
If I add analytics or ad pixels later, you will be asked first and this page will say so.
Who else sees it
Only the services the site runs on, each for its own part:
- Google Cloud and Firebase host the site and its database (Doha, Qatar) and handle sign-in (Firebase Authentication).
- Cloudflare runs the domain's DNS and the bot check on the inquiry form.
- Resend sends the site's emails: sign-in codes, inquiry replies and order receipts.
- Whop takes payments. Your card details go to Whop, never to me.
- Proton hosts my inbox, where inquiries arrive.
I do not sell your data or share it with anyone else, unless the law requires it.
How long I keep it
Inquiries and orders: as long as I need them to work with you and for my business records. Account data: until you ask me to delete your account. You can ask me to delete anything at any time.
Your choices
Email contact@diea.digital to see what I hold about you, correct it, or have it deleted. I answer within 30 days. Data protection in Qatar is governed by Law No. 13 of 2016 on Personal Data Privacy Protection.
Changes
If this changes, the date below changes with it.