youf*

Privacy notice · Updated 9 September 2026

Your privacy.

This notice explains how personal information is handled when you visit the Youf portfolio or contact us about design work.

Who is responsible

Youf is the portfolio of Youssef Magdy, the controller responsible for the processing described here.

Location: Alexandria, Egypt.

Contact: youssefmagdi277@gmail.com.

Information we handle

Enquiries. Contact links open your email application. If you send a message, we receive your email address, name if supplied, message, attachments and any project details you choose to share. Providing these is voluntary; without a reply address and enough information, we may be unable to respond.

Website delivery. Delivering pages and images involves technical requests, including IP address, requested URL, request time and browser information. Hosting and security providers may process these in operational logs.

Audience statistics. Vercel Web Analytics records page addresses, referring pages, filtered query parameters, approximate location, browser, operating system and device type.

Purposes and legal grounds

Project enquiries and agreed services. We use the information needed to discuss a project you request and deliver agreed design services. Where you are the contracting individual and the GDPR applies, this relies on steps taken at your request before entering a contract or performance of that contract (Article 6(1)(b)). Egyptian law also recognises necessary contractual processing.

General correspondence and business contacts. Replying to questions and communicating with someone acting for a client company serves our legitimate interest in managing relevant business communications.

Website delivery and security. Necessary technical processing serves our legitimate interests in delivering the portfolio, diagnosing faults and preventing abuse (GDPR Article 6(1)(f), where applicable). These interests must not override your rights and freedoms.

Audience measurement. We use Vercel Web Analytics to understand visits and improve the portfolio. Vercel describes its recorded analytics as anonymous and aggregated, without identifying individual visitors or tracking them across websites. We do not collect consent for analytics or send enquiry contents as analytics events. Hosting logs are separate from these statistics.

Billing and transaction records. Where applicable, we retain billing and transaction records for the periods required by tax and accounting laws.

Visiting this site or sending an enquiry does not give consent to unrelated uses or marketing.

Cookies and browser storage

The portfolio’s public features do not set application cookies or save visitor preferences in local storage or session storage. We do not use advertising pixels. Vercel Web Analytics uses a temporary visitor identifier instead of third-party cookies.

You can manage cookies and site storage through your browser settings. Websites you visit through external links operate under their own cookie and privacy policies.

Providers and international processing

We use the providers below for website delivery, media storage, analytics and email. We share information with professional advisers or authorities when necessary for a legal matter.

Vercel hosts this website. We also use Vercel Web Analytics for audience measurement and Vercel Blob to store and deliver portfolio media. Enquiries sent to our published Gmail address are handled through Google’s email service.

How long information is kept

Analytics. Visitor sessions expire after 24 hours. Analytics reports cover one month. This reporting period is not a deletion deadline.

Enquiries and client correspondence. We retain correspondence for as long as needed to handle the enquiry, manage any resulting client relationship, and establish or defend relevant legal claims. Billing and transaction records are kept for the periods required by applicable tax and accounting laws.

Runtime logs. One hour.

Your rights and contact options

Depending on the applicable law and the processing involved, you may request access to your information, correction or deletion, restriction of processing, objection to certain uses, or a portable copy. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.

Send requests to youssefmagdi277@gmail.com. We may ask for information to confirm your identity if needed. Where GDPR applies, we respond within one month. If an extension is needed for complex or numerous requests, we will explain why within that month.

You have the right to raise a privacy concern with Egypt’s Personal Data Protection Center. Where the GDPR applies, you can also raise a concern with the supervisory authority in your EU/EEA country of habitual residence, workplace or the alleged infringement.

Changes to this notice

We update this notice when our practices change and show the latest revision date above.