Privacy policy

The short version

• If you write to me through the site, I keep what you send so I can reply.
• Analytics only run if you accept them in the cookie banner. You can change your mind below at any time.
• I do not sell your information, and I do not use it for advertising.
• You can ask me to show you, correct or delete what I hold about you.

What I collect and why

When you contact me

The contact form sends me your name, your email address, the kind of project, a budget range and your message, and, if you add them, your company and your timeline. The site also records the IP address and the type of browser the message came from, which helps me spot spam and abuse.

Your message is stored on my server. The site emails me a copy so I see it quickly, and sends an automatic email to the address you entered, confirming your message arrived and repeating it. I use what you send to reply to you and to talk about the work you have in mind.

If you have accepted analytics, Google Analytics also records that a message was sent, with the kind of project, the budget range and the timeline you picked. It never receives your name, your email address or your message.

Signing in

The sign-in on this site is for me, to manage its content; visitors cannot create an account through the site. For an account, the site stores a name, an email address, the password in a scrambled (hashed) form that cannot be read back, not even by me, and optional profile details (a photo, a short bio and a website). Each sign-in keeps the browser type and IP address with the session, to keep sessions secure. Emails about an account, such as a password reset, are sent through my email provider.

Server logs

Like most websites, my server keeps a log of the requests it receives: the IP address, the type of browser, the address requested, the page you came from and the time. When a message arrives or someone signs in, the log also notes the email address used. The logs help me keep the site running and secure.

Analytics, only if you accept

If you click Accept in the cookie banner, the site uses Google Analytics 4 to count visits and see which pages people read, roughly where visitors are in the world, what kind of device and browser they use, and how quickly pages load. It helps me understand which work people come to see. Google's advertising features are switched off: this site runs no ads and no remarketing.

The site may also use Microsoft Clarity, which shows how pages are used (for example where people click and scroll), on the same terms: only after you accept.

Until you accept, neither tool is even loaded: nothing is sent to Google or Microsoft, and nothing is stored in your browser. The page addresses Google Analytics records leave out any extra codes a link may carry, apart from campaign tags. Your choice itself is saved in your browser's local storage (not in a cookie), so the banner does not ask you again.

Change your analytics choice

You can switch analytics on or off here whenever you like. Turning them off stops them straight away and removes the analytics cookies already stored in this browser.

Cookies and similar storage

• Nothing for analytics until you accept. If you do, Google Analytics sets cookies whose names start with _ga, and Microsoft Clarity, if in use, sets _clck and _clsk.
• Videos. Some pages show films through YouTube and Vimeo players, including the home page, where a film may start playing on its own, muted. Those players come from YouTube (Google) and Vimeo, which can set their own cookies and see your IP address when a player loads, whether or not you accept analytics. Their own privacy policies apply to them.
• Signing in. If you sign in, the site keeps your session in your browser's local storage.

The fonts on this site are served from my own server, so reading a page does not contact Google Fonts.

Who else handles your information

A few services help run the site. Each one only handles what it needs for its job:

• the companies that host my server and my database, where messages, accounts and server logs are stored;
• Amazon Web Services, which stores and serves the site's images and files;
• my email provider, which delivers the notification emails, the automatic replies and account emails;
• Google (Analytics) and Microsoft (Clarity), only if you accept analytics;
• YouTube and Vimeo, when a page with one of their video players loads.

Some of these services store information outside India or outside the country you are in. I do not sell your information to anyone, and I do not share it for advertising.

How long I keep it

I keep messages for as long as I need them to reply and to keep a record of our conversation, and I delete them if you ask me to. Sign-in sessions, with their browser type and IP address, are deleted automatically about 60 days after they start. Server logs stay on my server until I delete them. Analytics data is kept by Google for the period set in my Google Analytics account.

Your rights

You can ask me for a copy of the information I hold about you, ask me to correct it, or ask me to delete it. You can withdraw your consent to analytics at any time using the choice above. These rights come from India's Digital Personal Data Protection Act, 2023 and, if you are in the European Economic Area or the United Kingdom, from the GDPR and the UK GDPR, under which you can also complain to your local data protection authority.

To use any of these rights, email me at mayur@activeidler.com. I will reply within a month.

Keeping it safe

The site is served over an encrypted connection, passwords are stored hashed, and the part of the site where I manage content needs a sign-in. No system is perfectly secure, but I take reasonable care with what you send me.

Children

This site is not meant for children, and I do not knowingly collect information from anyone under 18.

Changes to this policy

If the way the site handles information changes, I will update this page and the date at the top. The terms for using the site are on the terms of use page.