Privacy policy

Manggala Cloud is a web and application development studio based in Semarang, Jawa Tengah, Indonesia, and acts as the controller of the data described on this page. For any question about your data, write to hello@manggala.cloud.

This policy covers this website only. Systems we build for clients are operated by those clients, under their own privacy policies.

The only place on this site that asks for personal data is the contact form. When you submit it, what gets stored is:

• The name and email address you entered.
• The content of your message.
• The page language and the page path you sent it from, so we know the context and can reply in the same language.
• A fingerprint of your IP address — not the address. What is stored is a salted SHA-256 digest, which cannot be reversed back to the original IP. The only question this answers is “how many times has this sender submitted in the past hour”, because the limit is five messages an hour.
• Your browser's user agent string, truncated at 400 characters, to tell visitors apart from scripts.
• The time of submission.

There are no accounts, no logins, and this site never asks for payment details. Your light/dark theme preference is kept in your own browser's localStorage and is never sent to our servers. The language choice lives in the URL (/id or /en), not in a cookie.

• To answer your enquiry and follow up on a project conversation. The basis is the consent you give by pressing send, and our legitimate interest in responding to a prospective client.
• To hold back spam and abuse. That is what the IP hash, the user agent, and the anti-bot check are for.
• To understand which parts of the site are useful, in aggregate.

We do not sell your data, trade it, or use it for targeted advertising.

This site loads two third-party analytics tools on every page. Both set cookies in your browser:

• Google Analytics 4 — visit counts, pages opened, traffic sources, and coarse city- or country-level location. We read it as aggregate figures, not per person.
• Microsoft Clarity — heatmaps and session recordings. To be plain about it: Clarity records your cursor movement, clicks, and scrolling on the page and replays them back as an anonymised session. Form field contents are excluded from the recording, but your behaviour on the page is not.

If you would rather not be included: block third-party cookies in your browser settings, install Google's official Analytics Opt-out Add-on, or use a browser or extension that blocks tracking scripts. The site works fully without either tool — nothing here depends on analytics.

What Google and Microsoft do with that data on their side is governed by their own privacy policies, which we do not control.

We use the following services to run this site. Several of them process and store data outside Indonesia:

• Supabase — the database where contact form messages are stored.
• Resend — delivers the email notification to us when a message arrives. That notification carries your name, email, and message.
• Cloudflare Turnstile — the anti-bot check on the form. Cloudflare receives your IP address as part of that check.
• Google and Microsoft — analytics, as described above.
• WhatsApp (Meta) — only if you choose to reach us through the WhatsApp link yourself. That conversation is governed by Meta's policies, not this page.

We keep contact form messages for as long as they remain relevant to a possible working relationship — an enquiry that never becomes a project does not need to be kept forever.

You can ask us to delete your message at any time by emailing hello@manggala.cloud from the same address you used on the form. We delete it and confirm by reply.

The whole site is served over HTTPS. IP addresses are never stored in their original form. Access to the message database is limited to the people at the studio who need to answer those messages.

No system is entirely proof against failure. If you need to send us something sensitive, the contact form is the wrong channel — email us and we will arrange something appropriate.

Under Indonesia's Law No. 27 of 2022 on Personal Data Protection, you have the right to:

• Know about and access the personal data we hold about you.
• Have inaccurate data corrected.
• Ask for your data to be deleted.
• Withdraw a consent you previously gave.
• Object to particular processing, and request a copy of your data.

Send requests to hello@manggala.cloud. We respond within a reasonable time, and may first ask you to confirm your identity so that one person's data is not handed to another.

Our services are aimed at organisations and businesses. This site is not directed at children, and we do not knowingly collect personal data from them. If you believe a child has submitted data through this site, tell us at hello@manggala.cloud and we will remove it.

When our tooling or our workflow changes, this page follows. The date at the top is when the wording was last reviewed — not when the site was last deployed.

Questions, access requests, or privacy objections: hello@manggala.cloud. We are based in Semarang, Jawa Tengah, Indonesia.