Cybersecurity undergraduate and web developer based in Sri Lanka, passionate about penetration testing, VAPT, and ethical hacking.

Contact Info

Hire Me
Hire Me

Privacy & Security

Short version: I collect only what you send through the contact form and use it only to reply to you. Visits are counted with cookie-free analytics that can’t identify you.

Last updated 25 October 2026

What I collect

This site is run by Nethra N. Wedage, Colombo, Sri Lanka. When you send a message through the contact form, I receive:

  • your name, email address and (optional) phone number
  • the enquiry type and your message
  • the date and time, and the IP address the message came from (to help stop spam)

When you browse the site, I also see anonymous visit statistics (see Analytics below). Browsing never requires you to give any personal information.

How it's used

Your message is emailed to me and a copy is stored on the web server, in a folder that cannot be accessed from the internet, so that no enquiry is lost if email delivery fails. I use these details only to reply to you and to discuss the work you asked about. I never sell or share them, and I don't add you to any mailing list.

I keep enquiries only for as long as they're needed to handle your request and any work that follows. You can ask me to delete them at any time.

Cookies

The site sets one cookie, PHPSESSID, and only when you open the contact page. It protects the form from forged submissions and spam, and it expires when you close your browser. There are no analytics, advertising or tracking cookies.

Analytics

I use Cloudflare Web Analytics to see how many people visit and which pages are useful. It sets no cookies, doesn’t use fingerprinting, and doesn’t build a profile of you or follow you across other websites. It records only page-level information such as the page visited, the referring site, your country, and your browser and device type. See Cloudflare Web Analytics and Cloudflare’s privacy policy.

Third parties

  • Google Fonts — the site's fonts are loaded from Google's servers, which means your browser's IP address is visible to Google when the fonts download. See Google's privacy policy.
  • Google Maps — the map on the contact page only loads if you click Load map. Until then, nothing is requested from Google Maps.
  • HackTheBox — my profile stats are fetched by the server, not by your browser, so no information about you is sent to HackTheBox.
  • Hosting — the site is hosted on a web server that keeps standard access logs (such as IP address and pages requested) for security and troubleshooting.

Your rights

You can ask to see the information I hold about you, have it corrected, or have it deleted. Email nethra@nethrawedage.com and I'll respond within 30 days.

Reporting a vulnerability

Found a security issue on this site? Thank you — please tell me privately at nethra@nethrawedage.com with enough detail to reproduce it. I'll acknowledge your report, keep you updated, and credit you if you'd like once it's fixed.

Please test only against your own session, don't access or change other people's data, avoid anything that could disrupt the site (such as denial-of-service or automated mass scanning), and give me reasonable time to fix the issue before sharing it publicly. There is no paid bug bounty. The same contact is listed in security.txt.