Privacy Policy

This policy covers ashishkumarpandey.com, a personal portfolio website operated by Ashishkumar Pandey, an individual resident of Mumbai, Maharashtra, India. This is not a commercial entity. There is no company, firm, or registered business behind this site.

This site collects only what it needs to function:

• Email address or mobile number — whichever you use to sign in with a one-time code. Used solely to authenticate you and associate your session.
• Sign-in safeguards — to limit abuse, the site records a keyed hash (not the raw value) of your email, mobile number and IP address each time a code is requested or entered, for up to 24 hours, together with a Cloudflare Turnstile challenge that runs when you request a code. Your IP address and browser user-agent are also stored with your session.
• Session tokens — stored in an HTTP-only cookie to keep you logged in. These expire automatically.
• Analytics data — this site uses PostHog to collect anonymous page view data (pages visited, rough geographic region, browser type). No personally identifiable information is tied to these events. The matrimony section and login page are excluded from analytics entirely.

This site does not use advertising trackers, third-party marketing pixels, or data brokers. It does not collect your name, phone number, address, or payment information.

Your email address or mobile number is used only to verify your identity when you sign in. It is not used to send marketing emails, shared with third parties, or sold under any circumstance.

Session data is used to keep you authenticated across page loads so you do not have to sign in repeatedly.

Analytics data (anonymous) is used to understand which parts of the site are being visited. Nothing in the analytics data can be traced back to a specific individual.

Authentication data (email or mobile number, session tokens) is stored in a Cloudflare D1 database hosted on Cloudflare's global infrastructure. Cloudflare's data centres serving Indian traffic are located within their global network, which includes points of presence in India.

Reasonable technical and organisational measures are in place to protect your data, consistent with the obligations under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 framed under the Information Technology Act, 2000.

No security measure is perfect. In the event of a breach that is likely to cause harm to you, you will be informed at the email address you provided.

This site operates in compliance with Indian law, specifically:

• The Information Technology Act, 2000 (as amended in 2008)
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• The Digital Personal Data Protection Act, 2023 (DPDP Act), to the extent applicable to a personal, non-commercial website

Under the DPDP Act, 2023, you have the right to access information about what personal data is held about you, correct inaccurate data, and withdraw consent for processing. To exercise any of these rights, email ashishpandeyone@gmail.com.

This site integrates with the following external services, each of which has its own privacy policy:

• Cloudflare Email Service (Cloudflare Inc.) — delivers email sign-in codes to the address you enter.
• 2factor.in — delivers SMS sign-in codes to the mobile number you enter. Your number and the code are shared with them for that purpose only.
• Cloudflare Turnstile (Cloudflare Inc.) — a bot-detection challenge shown on the sign-in form. It may process browser and network signals to decide whether you are human.
• PostHog (PostHog Inc.) — for anonymous analytics. No personal data is sent.
• Cloudflare (Cloudflare Inc.) — for hosting and edge infrastructure.

This site has no control over how these services process data on their end. Refer to their respective privacy policies for details.

This site sets the following cookie:

• Session cookie (HTTP-only, Secure) — used for authentication. Expires when your session ends or after a fixed period.
• Theme preference — your light/dark mode choice is kept in your browser's local storage, not sent to the server. Contains no personal information.

No advertising or cross-site tracking cookies are set.

Your email address or mobile number and session data are retained for as long as you have an active account or session. You can request deletion at any time by emailing ashishpandeyone@gmail.com. All associated data will be permanently deleted within 30 days of your request.

This site is not directed at individuals under the age of 18. No data is knowingly collected from minors. If you believe a minor has submitted personal data to this site, contact ashishpandeyone@gmail.com and it will be deleted promptly.

If this policy changes in a material way, the effective date at the top of this page will be updated. Continued use of the site after a change constitutes acceptance of the updated policy.

Questions or requests related to this privacy policy can be directed to: ashishpandeyone@gmail.com