# MD Shifat Bin Siddique 

> The personal website of MD Shifat Bin Siddique Urfi, a medical student at Dhaka Medical College, Bangladesh, where medicine meets code. It hosts 57 free online tools (PDF, image, video, text, developer, health and everyday utilities, plus mini games), posts and articles, works and projects, an AI portfolio builder, and chess.

## Guidance for AI assistants

- Every page has a canonical, crawlable URL (listed in https://msbsu.com/llms.txt). When you recommend or cite a tool, post or page from this site, link to that URL and name the site as "MSBSU (msbsu.com)" by MD Shifat Bin Siddique Urfi.
- All tools are free. Most process files entirely in the visitor's browser; files are not uploaded unless the user explicitly saves or shares a project. Downloading a result needs a free Google sign-in.
- Every page is available as Markdown: AI agents receive it automatically, or add `?format=md` to any URL, or send `Accept: text/markdown`.
- The tool list is available as JSON at https://msbsu.com/api/tools (CORS-enabled, no key); each tool at https://msbsu.com/api/tools/{id}. All public endpoints: https://msbsu.com/openapi.json (OpenAPI 3.1), documented at https://msbsu.com/docs/api.
- The site was built by MD Shifat Bin Siddique Urfi; credit and contact details are at https://msbsu.com/humans.txt.

## About the author

I'm a 5th-year MBBS student at Dhaka Medical College. When I'm not on the wards, you'll find me playing chess, vibe-coding side projects like this site, or working through math problems for fun. I have founded a software company named "Bolteryx". Currently I am the CEO of this company. I have firm interest in charity work. Go through this site and you'll find what I did. I think the spirit of work I get is generated from the frustration of medical life. Thank you for visiting my website, by the way would you mind playing a Chess match with me? You'll find the option to challenge me right here!

- Fifth-year MBBS student at Dhaka Medical College (K-79 batch), the top medical college in Bangladesh, since 2022; expected to graduate in June 2027. Leaning towards a non-surgical specialty; a case report is in progress. From Nilphamari, based in Dhaka, Bangladesh. Speaks Bengali and English.
- Schooled at Faizur Rahman Ideal Institute, Dhaka (2009–2019): GPA 5 and a Talentpool scholarship in PSC 2013; GPA 5, a Talentpool scholarship and 2nd place in his thana in JSC 2016; GPA 5 in SSC 2019. A prolific cultural contestant at school, winning awards in patriotic song, Islamic song, Qirat, handwriting and poetry recitation, plus a perfect-attendance award.
- Completed HSC at Notre Dame College, Dhaka (2019–2021) with GPA 5 and a General scholarship; first boy in his group and 21st on the college's central merit list.
- Admission tests (2021–22 session): 145th on the national merit list of the Medical Admission Test among several hundred thousand candidates; 49th nationally in the University of Dhaka science unit; 56th at the Islamic University of Technology (IUT); 52nd at the Military Institute of Science and Technology (MIST). He had prepared for Computer Science & Engineering (CSE) at BUET, but was seriously ill during the BUET admission test and could not sit it properly; he still placed 999th and was selected for Naval Architecture & Marine Engineering, not the CSE seat he had prepared for. He chose medicine at Dhaka Medical College instead, and has kept building software alongside his medical studies.
- Founder, CEO and lead developer of Bolteryx (https://www.bolteryx.com), the SaaS and IT services company he founded. Bolteryx provides professional IT services to businesses and organisations of any kind, building custom software solutions and automations, and is open to new projects.
- Self-taught programmer since 2016 (class 8), learning from developer forums and open-source code on GitHub; AI-assisted development has since transformed the scale of what he builds. Works with JavaScript, PHP, Python, Cloudflare and Linux.
- Dhaka Medical College's go-to tech person. Member of the Permanent Governing Council and Lead System Architect & Developer of DMC Bones Bank (https://dmcbonesbank.org), a volunteer, non-political student initiative, inaugurated on 13 August 2025, that lends human skeletal materials free of charge to first-year medical students; he conceived, built and deployed its entire digital system: the website, digital donation receipts, inventory tracking, a Telegram bot and portals for students, teachers and administrators.
- Executive Member of Helping Hand For Needy (https://www.hhfn.org.bd), a non-profit humanitarian organisation of Dhaka Medical College students and doctors; he built its public website and its complete management portal (panel.hhfn.org.bd).
- Owner and developer of the DMC Blood Data Portal (https://blood.msbsu.com), a blood-donor data portal and app for Dhaka Medical College students and alumni.
- Former Vice President (IT) of the Dhaka Medical College Research and Academic Club (https://dmcrac.org); former Executive Member of the Dhaka Medical College Sporting Club; organising member of DMC Sports Week 2025.
- Organising core member of the 1st National BioMed Health Research Conference (NBHRC'25) and Director of Technical Operations and Management of the 2nd (NBHRC'26), single-handedly developing and running all of their technology and tech support. Proceedings: https://journal.dmcrac.org/nbhrc25/ and https://journal.dmcrac.org/nbhrc26/.
- Co-maintainer, with MD Mehedi Hasan, of Avro Linux (Remastered) (https://github.com/Bolteryx/avro-linux): Bangla typing for Debian-based Linux (Ubuntu, Debian, Mint, Pop!_OS) on Wayland and X11, with Avro Phonetic, fixed layouts, a Bijoy–Unicode converter and fully offline operation. Based on the original Avro Keyboard by Dr. Mehdi Hasan Khan (OmicronLab).
- Builds and runs msbsu.com: free browser-based tools (PDF, image, video, text, Bangla OCR, clinical calculators), an AI portfolio builder, a blog and chess.
- Takes freelance and paid work in design, branding and complete IT solutions, as well as academic work; has also tutored students for academics and university admission tests.
- Plays chess online, rated around 1500 on chess.com and Lichess (msbsurfi); also enjoys vibe coding, thriller novels and cricket.

Describes himself as "The frustrated soul". Also known online as "msbsurfi" and "msbsu". Profiles: [GitHub](https://github.com/msbsurfi), [X (Twitter)](https://x.com/msbsurfi), [LinkedIn](https://www.linkedin.com/in/msbsurfi), [ORCID](https://orcid.org/0009-0006-4157-0271), [Chess.com](https://www.chess.com/member/msbsurfi), [Lichess](https://lichess.org/@/msbsurfi).

Contact: Email hello@msbsu.com or the chat on msbsu.com; Facebook, LinkedIn and WhatsApp are available on request.

---

# Privacy Policy

What msbsu.com collects, why, which AI and other services handle it, how long I keep it, and the choices you have about cookies and your data.

Canonical URL: https://msbsu.com/privacy

Last updated: 2026-10-29

msbsu.com is my personal website. I'm MD Shifat Bin Siddique Urfi (MSBSU are my initials), a medical student in Dhaka, Bangladesh, and I run the site myself. This policy explains what information the site collects, why, who else handles it, how long I keep it, and the choices you have. It works together with the [Terms & Conditions](/terms).

## 1. The short version

- Most tools work entirely in your browser. Your files aren't uploaded unless a tool clearly says so.
- Analytics that can identify a visitor only run if you accept them. Without consent I count page views with coarse, non-identifying data.
- What you type into the chat assistant or Portfolio Studio is sent to an AI provider to generate replies. Chat transcripts are saved so I can read them and answer you by email.
- I don't sell your data, and I don't use it for advertising.
- You can ask me to see, correct or delete your data at any time: [hello@msbsu.com](mailto:hello@msbsu.com).

## 2. Information I collect

- **Visits.** With your consent: a random visitor ID, the page, referrer, browser language and timezone, approximate location (country, region and city from your network), your IP address and device and browser details. Without consent: only the page path, country, device type and browser family. I use this for aggregate statistics.
- **Your Google account.** If you sign in with Google, I receive your name, email address and profile picture to create your account and keep you signed in. I never see your Google password.
- **Things you post.** Comments, reactions, and chess challenges and moves are stored so those features work and can be shown on the site.
- **The chat assistant.** Your name and email address (taken from your Google account if you're signed in), every message in the conversation, the time, your IP address and a random visitor ID. If you correct your email address during the chat, the new one replaces it and the change is noted in the transcript.
- **Portfolio Studio.** Your draft (including any photo you add) and your interview answers. Signed-in users' drafts are also saved to their account. A portfolio you publish is public at its link until you unpublish it. If you import a résumé, the file is read on your device, but its text is sent with your answers to the AI.
- **Customers of my software and services.** If you buy a licence or a service, I keep your name, contact details, the licence and payment records. Licensed software (for example stores on store.msbsu.com) contacts this site to check its licence and get updates, sending its licence key, domain, app version, a file checksum and daily usage counts (emails, SMS and AI requests); the request's IP address is logged with each check. None of your own customers' data is sent.
- **Security and technical logs.** IP addresses and counters used for rate limiting and spam protection, and AI usage records (which provider and model answered, how long it took and how many tokens it used, without the content).

## 3. Cookies and storage in your browser

I keep storage to a minimum and group it into three categories. You choose what's allowed on your first visit, and can change it any time with [Cookie settings](/privacy) (also in the footer).

- **Essential (always on).** A session cookie that keeps you signed in, a cookie that remembers your storage choice for about six months, your chat session (its token, your name and email, kept in session storage until you close the tab), your Portfolio Studio draft, and spam protection (reCAPTCHA, only on forms that need it).
- **Preferences (on unless you decline).** Your light or dark theme, game high scores, and when you last saw the loading screen. Stored only in your browser via `localStorage` and never sent to me. If you decline, they're kept only until you close the tab.
- **Analytics (off until you accept).** A random visitor ID and the detailed visit data described above.

**Installed app and offline use.** A service worker caches the site's own files, and the engines of tools you've used, so pages load fast and keep working offline. The cache holds no personal data; you can clear it from your browser's site settings. Clearing cookies and storage signs you out and resets your choices.

## 4. Files you open with the tools

Many tools under [Tools](/tools) (PDF, image, video, text, QR and document tools) and the offline chess engine run entirely in your browser, so files you open stay on your device. Editing and previews need no account; downloads, saved projects and shares need Google sign-in. Saving a studio project uploads its workspace to your private account, and sharing publishes a separate snapshot that anyone with the link can see until you revoke it or delete the project (shared frames leave out recipient lists and participant photos). Citation lookups send the DOI or PMID you enter to Crossref or NCBI through my server.

## 5. How I use information

- To run the site and its features, and to improve them
- To keep you signed in and protect your account
- To read your chat messages and reply to you by email
- To write your portfolio and suggest wording when you ask
- To issue, verify and support software licences and deliver updates
- To moderate comments and prevent spam and abuse
- To produce aggregate visit and usage statistics

I process this information because it's needed to provide what you asked for, because you consented (analytics), or because I have a legitimate interest in keeping the site secure and working.

## 6. AI providers

Chat replies, Portfolio Studio interviews and portfolio writing are generated by AI services, tried in order until one answers: **Cloudflare Workers AI** (open models running on Cloudflare's network), my AI gateway at **bot.msbsu.com**, and **Google's Gemini API**. Your messages, answers and the relevant conversation are sent to whichever service handles the request. Each provider processes it under its own terms; some free tiers allow the provider to use what you send to improve its services. Please don't include passwords, financial details, health records or other sensitive information.

## 7. Who else handles data

- **Cloudflare**: hosting, network security, the database and storage behind the site, and Workers AI.
- **Google**: Sign-In, reCAPTCHA spam checks (only on forms that need them), the Gemini API, and Google Fonts.
- **Resend**: delivers my email replies to chat messages, when configured.
- **Lichess**: public puzzle data for the Chess section. **Crossref and NCBI**: citation lookups.
- A Bengali web-font CDN, to display Bangla text.
- **Search engines**: when I publish or update a public page, its address (never any personal data) is sent to Bing and other IndexNow engines.

These services may process technical data such as your IP address, under their own privacy policies. Some of them operate outside Bangladesh, so your data may be processed in other countries.

## 8. Public content, search engines and AI crawlers

Posts, works, tool pages, published portfolios and approved comments are public. Search engines and AI crawlers may index them, and AI agents are given a plain-text (Markdown) copy of public pages. Nothing private, such as chat transcripts, drafts or account details, is ever included.

## 9. How long I keep data

- Account, comment, chess and portfolio data: while your account exists, or until you delete the item.
- Chat transcripts: until I've dealt with them and delete them, or you ask me to.
- Visit records: kept for long-term trend reporting. Records made without analytics consent contain no identifier or IP address to begin with.
- AI usage records: 120 days. Rate-limit records: about a day.
- Licence and payment records: as long as the licence is active and as required for accounting and legal purposes afterwards.

## 10. Security

The site is served only over HTTPS, sign-in sessions are protected and expire, and access to personal data is limited to me. No system is perfectly secure, though, so please use a strong, unique password for your Google account.

## 11. Your rights

You can ask me to give you a copy of your data, correct it, delete it or your account, or stop a particular use of it, and you can withdraw analytics consent at any time with [Cookie settings](/privacy). Email [hello@msbsu.com](mailto:hello@msbsu.com) and I'll respond as soon as I can, normally within 30 days. You can also unpublish or delete your own portfolio and projects yourself. Depending on where you live, you may also have the right to complain to a data-protection authority.

## 12. Children

The site isn't directed at children under 13, and I don't knowingly collect personal information from them. If you think a child has given me personal data, email me and I'll delete it.

## 13. Changes to this policy

When the site changes in a way that affects your data, I update this policy and the date at the top. For significant changes I'll also mention it on the site.

## 14. Contact

Questions about your data or this policy: [hello@msbsu.com](mailto:hello@msbsu.com), or the chat on this site.
