Privacy Policy

1. Introduction

This Privacy Policy describes how Victor Ndunda ("we", "us", or "our") collects, uses, and protects information when you visit victorndunda.com (the "Site"). We are committed to protecting your privacy and complying with the Kenya Data Protection Act 2019 and international privacy standards including GDPR.

2. Information We Collect

2.1 Public Pages (Home, Blog, Services)

The public pages of this Site do not collect personal information. We do not use cookies for tracking on public pages. We do not collect analytics data on public visitors.

2.2 Private Portal (Job Search)

The private job search portal at /jobs/ uses Google Sign-In for authentication. When you sign in:

• Google provides your email address and a verification token to our Site
• We store only your email address in your browser's session storage (cleared when you close your browser)
• We do not store your email on any server — authentication is client-side only
• We do not share your email with any third party

2.3 Job Search Data

Job listings are fetched in real-time from third-party APIs (Arbeitnow, RemoteOK). Your search queries and filter preferences are processed in your browser only and are not sent to or stored on any server.

3. Google Authentication

The private portal uses Google Identity Services (GIS) for authentication. When you click "Sign in with Google":

• You are redirected to Google's secure login page
• Google authenticates you and sends a JSON Web Token (JWT) back to our Site
• We decode the JWT to verify your email address
• Only the email address mututandunda@gmail.com is authorized
• All other email addresses are rejected with an "Access denied" message

Google's Privacy Policy is available at policies.google.com/privacy.

4. Third-Party Services

This Site uses the following third-party services (including Web3Forms for contact forms, Cal.com for scheduling, and jsPDF for PDF generation) that may collect data according to their own privacy policies:

• Google Identity Services — Authentication (Privacy Policy)
• Google Fonts — Typography (Privacy Policy)
• GitHub Pages — Hosting (Privacy Policy)
• Arbeitnow API — Job listings (Privacy Policy)
• RemoteOK API — Job listings (Privacy Policy)

5. Cookies

This Site does not use cookies for tracking, advertising, or analytics. The only client-side storage used is:

• localStorage — stores your theme preference (dark/light) only
• sessionStorage — stores your authentication status for the current browser session only

6. Data Security

We implement appropriate technical measures to protect your information:

• HTTPS encryption enforced via GitHub Pages
• Client-side authentication (no server-side data storage)
• Session-based auth (cleared on browser close)
• Email whitelist (only authorized email can access private portal)
• noindex, nofollow on private pages
• robots.txt disallowing /jobs/ path

7. Your Rights

Under the Kenya Data Protection Act 2019 and GDPR, you have the right to:

• Be informed about how your data is used
• Access your personal data
• Rectify inaccurate data
• Erasure ("right to be forgotten")
• Object to processing

Since we do not store any personal data on servers (all data is client-side only), these rights are automatically satisfied — simply closing your browser clears all session data.

8. Children's Privacy

This Site is not directed to children under 18. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

10. Contact

For privacy questions or requests, contact: mututandunda@gmail.com