Privacy notice

This privacy notice explains how Pen Drift (pendrift.pro), operated by Priya as a personal blog, handles information when you visit the site. It is written in plain language because the Personal Data Protection Act 2012 (PDPA) of Singapore gives you rights, and because you should not need a law degree to understand what happens when you load a page about a canal walk or click accept on a cookie banner.

Last updated: 8 August 2026.

Who is responsible

The data controller for this site is Priya, reachable at [email protected]. Pen Drift is not a company. There is no corporate entity behind the blog, no marketing department, and no data broker selling lists. It is one person writing notes and publishing them on a small website hosted on a server I pay for.

What this site does not do

I keep no contact form on Pen Drift. That means I do not collect your name, email address, phone number, or message content through this website unless you choose to email me directly. Email sent to [email protected] is handled by my email provider, not stored in a database on this site. I do not run analytics that profile you across the web. I do not use Facebook pixels, Google Analytics, or similar tracking scripts. I do not ask you to create an account. There is nothing to log into.

Server logs

Like most websites, the server that hosts pendrift.pro automatically records technical information when you request a page. This typically includes your IP address, browser type, operating system, referring URL, the page you requested, and a timestamp. The hosting provider maintains these logs for security and troubleshooting — for example, to detect abusive traffic or diagnose a broken page. I do not merge server logs with other data to identify you personally, and I do not use logs for advertising. Log retention follows the hosting provider's policy, generally a rolling period of weeks to a few months, after which entries are deleted or overwritten.

Cookies and similar technologies

Pen Drift uses a small number of cookies, only with your consent except for strictly necessary storage. Details are on the cookies page; the summary here is:

— pd_consent stores your cookie choices (essential, preferences, embedded maps) as a JSON object. It is set when you click Accept, Reject, or Save on the cookie banner. Without this cookie, the site cannot remember whether you allowed optional features.

— pd_read stores your reading preference — quiet reading mode on or off — only if you accept preference cookies. If you reject preferences, this cookie is not set or is deleted.

Neither cookie contains your name or email. They are first-party cookies set by pendrift.pro, not shared with advertisers.

Embedded Google Maps

The find me page may display an embedded map served from Google Maps when you allow embedded content. If you reject embed cookies, the map does not load; a placeholder explains why, and you may choose to show the map once for that visit without changing your saved consent. When the map loads, Google may collect data according to Google's own privacy policy — including IP address, device information, and interaction with the map. I do not control Google's processing. I include the embed because a map helps readers locate Simei MRT relative to my neighbourhood. You can avoid the embed entirely by using the text address on the same page.

Legal basis and consent

Under the PDPA, organisations must collect, use, and disclose personal data only with consent or another recognised basis. For optional cookies and embeds, I rely on your consent via the cookie banner. Essential operation of the site — serving HTML pages, recording server logs for security — may proceed on legitimate grounds related to operating a website, but I still ask for consent before setting non-essential cookies because that is the honest approach and matches how the site is built.

You may withdraw consent at any time using the "Change cookie settings" or "Withdraw consent" links in the footer. Withdrawing deletes pd_consent and pd_read and resets embeds and preferences until you choose again.

What I do with email you send me

If you email [email protected], I receive your email address, whatever name you put in your message, and the content you write. I use that information only to read and reply. I do not add you to a mailing list. I do not sell or share your email with third parties. I may keep messages in my inbox for reference — for example, if you point out a factual error I need to fix — but I do not build a contact database from them.

Retention

Cookie consent data persists for approximately six months unless you clear cookies sooner. Reading preference persists for the same period if enabled. Server logs rotate on the host's schedule. Email is retained according to my personal inbox habits; you may ask me to delete correspondence and I will do so unless I have a reason to keep it (for example, an ongoing factual dispute).

Your rights under the PDPA

You have the right to access personal data about you that I hold, to correct inaccuracies, and to withdraw consent for processing that relies on consent. You may also have rights to data portability and to complain to the Personal Data Protection Commission (PDPC) if you believe I have handled your data improperly. To exercise access or correction, email [email protected] with enough detail for me to identify the data — for example, the email address you used and approximate date of contact. I will respond within a reasonable time.

The PDPC is Singapore's national privacy regulator. You can learn more at pdpc.gov.sg, including how to file a complaint if we cannot resolve a concern directly.

Children

Pen Drift is written for general readers and is not directed at children. I do not knowingly collect data from anyone under thirteen through this site. If you believe a child has contacted me in error, write and I will delete the correspondence.

Links to other sites

Notes may mention external places or link to maps and references. Once you leave pendrift.pro, that site's privacy practices apply. I am not responsible for third-party sites.

Security

I use HTTPS to encrypt traffic between your browser and the server. No system is perfectly secure; I take reasonable steps — patched hosting, strong passwords, minimal plugins — but I cannot guarantee absolute security. Do not send sensitive personal data — medical records, financial account numbers, NRIC — through email or any channel connected to a personal blog.

Changes to this notice

If I change how the site handles data — for example, adding a new cookie or embed — I will update this page and the date at the top. Material changes will be reflected on the cookies page and in the cookie banner where appropriate. Continued use after an update means you have seen the new notice, but optional features still require fresh consent through the banner mechanism.

Contact

Questions about privacy: [email protected]. I read mail on weekday evenings, SGT, and I will answer as clearly as I can. If the PDPC guidance changes or my hosting setup changes, I will revise this notice and note the new date at the top so you can tell what shifted.