On this page
Last updated: 4 October 2026.
This is the privacy policy for sonnguyen9800.com, a personal blog run by Son Nguyen Hoang, and for its comment server at comments.sonnguyen9800.com. It also covers the “Sign in with Facebook”, “Sign in with Google” and “Sign in with GitHub” buttons in the comment box. I’m one person, not a company. I don’t sell, rent or share your data with anyone, and the site has no ads and no analytics or tracking scripts.
Reading the blog
You can read every page without an account. The site itself sets no cookies.
- Your browser remembers two settings on your own device (in
localStorage): light or dark theme, and whether you hid the “On this page” box. They never leave your device. - Hosting: the site is served by Netlify. Like any web host, Netlify handles your IP address and browser details to deliver pages and may keep them briefly in its logs. I don’t use those logs to identify anyone.
- Embedded content: a few posts embed videos or posts from other sites (for example YouTube). Those load from that site and follow its own privacy policy.
Comments
Comments run on Remark42, an open-source comment server that I host myself. To comment, you sign in with Facebook, Google or GitHub. Anonymous comments and picture uploads are turned off.
What I get when you sign in
The comment server asks the provider only for your basic public profile:
- Facebook: the
public_profilepermission (your name, profile picture and account id). - Google: the
userinfo.profilescope (your name, profile picture and account id). - GitHub: your public profile (name or username, avatar and account id).
It does not ask for your email address, friends list, posts, contacts or anything else, and it can’t post anything on your behalf.
What is stored
On my comment server:
- Your user id, made from the provider’s name and a one-way hash of your account id (for example
google_3f2a…). Your raw account id is not kept. - Your display name and profile picture, shown next to your comments. A copy of the picture is cached on the server so your provider isn’t contacted on every page view.
- Your comments, with the page they’re on, their date and any edits, and your votes on comments.
- A one-way hash of your IP address, used only to fight spam and abuse. Your actual IP address is not stored.
Your comments, name and picture are public on the page where you comment. Everything else is visible only to me as the site’s admin.
Cookies
The comment box sets two cookies on comments.sonnguyen9800.com, and only after you sign in:
JWTkeeps you signed in. It lasts about 8 days, or until you sign out.XSRF-TOKENprotects your session from forged requests.
They are needed for signing in and are not used for tracking or advertising.
How long it’s kept
Comments stay until you or I delete them. The comment server also keeps backups of the comments, which are replaced over time, so deleted data disappears from them within a few weeks.
Your rights and data removal
You can at any time:
- Delete a comment: use the delete or edit option on your own comment while it can still be edited, or ask me.
- Get a copy of your data: ask me and I’ll send you everything stored under your user id.
- Delete all your data: open your profile in the comment box (click your name), choose “Request my data removal”, and send me the link it gives you. I’ll delete your user record, comments, votes and cached picture, usually within 7 days, and confirm when it’s done. You can also simply write to me (below) with the name you commented under and which provider you used.
If you signed in with Facebook, you can also remove the app from your Facebook settings (Settings & privacy → Settings → Apps and websites). Removing it stops future sign-ins; to delete what’s already stored, use one of the ways above.
Children
This site isn’t aimed at children under 13, and I don’t knowingly collect data from them. If you think a child has commented, contact me and I’ll remove it.
Changes
If this policy changes, I’ll update this page and the date at the top.