01 — What I collect
Contact form: your name, email, what the message is about, and the message. Ship log: your email, only if you tick the box. If you accept analytics: the pages you view, what you click and scroll, how long you stay, your device, browser and rough location from your IP address, and with PostHog a replay of the visit with everything you type hidden. Everyone who visits: Cloudflare, which hosts the site, sees your IP address and browser in its request logs, and counts page views without cookies.
02 — Why
To reply to you, to send the ship log if you asked for it, to see which pages people open and fix what breaks, and to keep the site safe from abuse. The form, the ship log and analytics rely on your consent; Cloudflare’s cookieless page counts and keeping the site running rely on legitimate interest.
03 — Cookies and analytics
Nothing is stored on your device until you answer the customs check banner. If you accept, Google Analytics sets _ga cookies and PostHog sets a ph_ cookie, so a return visit counts as the same visitor. Reject, or change your mind with Cookie settings at the bottom of any page, and they are deleted. Your Day/Night and cookie choices stay in your browser’s local storage, which never leaves your device. Cloudflare’s page counts use no cookies at all.
04 — Who else sees it
Hosting and cookieless page counts: Cloudflare. Analytics, only with your consent: Google Analytics (Google) and PostHog, both of which store data in the United States. Form delivery and ship log emails: Resend, once the form is switched on. Each acts only on my instructions under its data processing terms. Advertising features are switched off, and nobody buys or sells your data here.
05 — How long it stays
Messages: [retention period]. Ship log: until you unsubscribe. Google Analytics: 2 months of visit-level data. PostHog: 1 year for events and 1 month for replays. Request logs: as long as Cloudflare keeps them for security.
06 — Your rights
Under India’s Digital Personal Data Protection Act, 2023 and the GDPR, you can ask to see, correct or delete your data, or withdraw consent at any time: Cookie settings handles analytics in one click. For anything else, email me and it gets done within 30 days.
07 — Accessibility
This site aims for WCAG 2.2 AA: text contrast of at least 6.4:1 in both themes, full keyboard access with a visible focus ring, and no motion when your device asks for less. If something gets in your way, email me.
08 — Contact
Mohit Nippanikar, Mumbai, India: rnippanikar7@gmail.com. This is also the grievance contact under the DPDP Act.