Legal

Privacy policy

Last updated: 27 July 2026

Queenstown neighbourhood view

This privacy policy explains how mindtrace.pro ("MindTrace", "this site", "I", "me") collects, uses, stores and protects personal data when you visit or contact me. MindTrace is a personal blog operated by Ivan, an individual writer based in Singapore. It is not a company, agency or commercial service.

I take personal data seriously even on a small site. Singapore's Personal Data Protection Act 2012 ("PDPA") sets the framework I follow. This policy is written in plain language so you can understand what happens to information you share — without needing a law degree to read it.

1. Who is responsible for your data

The data controller for mindtrace.pro is Ivan, reachable at [email protected] or Blk 57 Commonwealth Drive, #02-36, Singapore 140057. I am responsible for deciding how and why personal data is processed on this site.

2. What personal data I collect

Depending on how you use the site, I may collect the following categories of data:

  • Contact form data: your name, email address and message content when you submit the form on contact.php.
  • Technical and usage data: IP address, browser type, device type, pages visited, referring URL and approximate access times — typically collected via server logs and, if you consent, analytics cookies.
  • Cookie preference data: a record of your cookie choices stored in your browser so the banner does not reappear unnecessarily.
  • Correspondence: any follow-up emails if I reply to your message.

I do not operate user accounts, newsletters, e-commerce checkout or paid subscriptions on this site. I do not knowingly collect NRIC numbers, financial account details, precise geolocation tracked over time, or health records through this website.

3. How I collect data

Data is collected in three main ways:

  • Directly from you — when you fill in the contact form and tick the PDPA consent checkbox.
  • Automatically — when your browser requests pages, images and scripts from the hosting server. Standard web server logs may record IP addresses and user-agent strings.
  • Through cookies — small text files stored on your device when you accept or customise cookie preferences. See Section 6 below.

4. Purposes and legal basis for processing

I process personal data only for purposes that are reasonable in the context of a personal blog:

  • To read and respond to messages you send via the contact form.
  • To maintain site security, diagnose technical faults and prevent abuse (including spam submissions caught by the honeypot field).
  • To understand aggregate traffic patterns if you consent to analytics cookies — for example, which pages are read most often.
  • To remember your cookie preferences for up to six months.
  • To comply with applicable law if required.

Under the PDPA, I rely on your consent for contact form submissions (which you provide explicitly before sending) and for non-essential cookies (which you control through the cookie banner). Certain processing — such as basic server logging for security — may be necessary for the legitimate operation of the site.

5. Who receives your data

I do not sell, rent or trade your personal data. Data may be shared only with:

  • Hosting and infrastructure providers that store and deliver this website. These providers process data on my behalf to operate the server.
  • Email delivery systems used when contact form messages are transmitted to my inbox.
  • Analytics providers — only if you accept analytics cookies in the banner. If you reject analytics, those tools should not load.
  • Authorities — only if I am legally required to disclose information.

Some providers may store or process data outside Singapore. Where that occurs, I aim to use reputable providers and reasonable safeguards, though you should be aware cross-border transfers may be involved in standard web hosting.

6. Cookies and similar technologies

When you first visit mindtrace.pro, a cookie banner offers three choices: Accept all, Reject all, or Customise. Your selection is stored for six months unless you clear browser data sooner.

  • Strictly necessary cookies — required for basic functions such as remembering your cookie decision. These cannot be switched off through the banner because the site needs them to honour your choice.
  • Analytics cookies — optional. They help me understand how visitors use the site in aggregate. They are off unless you accept or enable them in Customise.
  • Preferences cookies — optional. They remember display choices if implemented in future updates.
  • Marketing cookies — optional. This personal blog does not run advertising campaigns, but the category is listed for transparency and future compatibility. They remain off unless you explicitly enable them.

You can also manage or delete cookies through your browser settings. Blocking all cookies may affect how the banner behaves on return visits.

7. Retention

I keep personal data only as long as needed for the purposes above:

  • Contact form messages: typically up to twelve months after the conversation ends, unless a longer period is needed to resolve an ongoing matter.
  • Server logs: usually rotated or deleted within a few months unless needed for a security investigation.
  • Cookie consent records: up to six months, matching the banner notice.

When data is no longer required, I delete it or anonymise it where deletion is not technically feasible.

8. Security

I use reasonable administrative and technical measures appropriate to a personal blog — including HTTPS where supported by hosting, form validation, a honeypot spam field and consent checks before accepting messages. No method of transmission over the internet is completely secure; I cannot guarantee absolute security, but I aim to reduce ordinary risks.

9. Your rights under the PDPA

Subject to exceptions in the PDPA, you may have the right to:

  • Ask whether I hold personal data about you and obtain access to it.
  • Request correction of inaccurate or incomplete data.
  • Withdraw consent for optional processing (such as analytics cookies) — withdrawal does not affect processing that already occurred lawfully.
  • Request deletion of contact messages you sent, subject to any legal retention need.

To exercise these rights, email [email protected] with enough detail for me to identify your request. I may need to verify your identity before responding. I aim to reply within thirty days.

10. Third-party links

Journal posts may mention places, maps or external resources. This site does not embed social media feeds or third-party comment widgets at the time of writing. If you follow a link to another website, that site's privacy policy applies — not this one.

11. Children

MindTrace is written for a general adult audience. I do not knowingly collect personal data from children under thirteen through the contact form. If you believe a child has submitted data, contact me and I will delete it promptly.

12. Changes to this policy

I may update this policy when the site changes or when law requires it. The "Last updated" date at the top will change accordingly. Material changes will be noted on this page. Continued use of the site after an update constitutes acknowledgement of the revised policy where permitted by law.

13. Personal blog disclaimer

What you read on MindTrace is my own writing — notes, memories and opinions as they were when I set them down. These posts are personal reflections, not medical, legal, financial or fitness guidance. I describe places and everyday moments from my own point of view; I do not name or speak for anyone else, and I try to write about my neighbourhood with care and honesty. If I have got something wrong, tell me and I will fix it.

14. Contact

Questions about this policy or your personal data:

Ivan · MindTrace
Blk 57 Commonwealth Drive, #02-36, Singapore 140057
Email: [email protected]
Phone: +65 6228 4610

If you remain unsatisfied after contacting me, you may lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore in accordance with its procedures.