1. Introduction and scope
This Privacy Policy (the "Policy") explains how Amartya Yadav ("Amartya Yadav", "he", or "his") collects, uses, discloses, retains, and protects personal data when a visitor ("you") accesses or interacts with the website at https://amartyayadav.com and its subpages (the "Site"). It applies worldwide and is intended to comply with the European Union and United Kingdom General Data Protection Regulation (the "GDPR"), India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the California Consumer Privacy Act as amended by the California Privacy Rights Act (the "CCPA" and "CPRA"), and comparable data protection frameworks. Where a law that applies to you grants you greater rights than this Policy describes, that law prevails.
2. Data controller and contact
Amartya Yadav is the data controller, and under the DPDP Act the Data Fiduciary, responsible for the Site, and operates it in a personal capacity from Navi Mumbai, India. Questions, requests, or grievances regarding personal data may be raised with the site owner, who serves as the channel for grievance redressal for the purposes of the DPDP Act.
3. Summary
The Site is a personal portfolio. It does not sell personal data, does not serve advertising, does not run profiling analytics, and does not set advertising or tracking cookies. It embeds no third-party fonts, scripts, analytics, social media widgets, or media players. The only data processed is the limited, standard technical data that any website and its host must process in order to deliver pages securely, as described below.
4. Categories of personal data collected
4.1 Information you provide
The Site has no contact form, account, comment, or other feature that asks you to submit personal data, so there is normally nothing for you to provide. The on-site search runs entirely in your browser against a static index; what you type is not sent to or stored by the site owner.
4.2 Information collected automatically
When you visit the Site, the hosting and content delivery provider, Cloudflare, automatically receives standard technical data needed to serve and secure the Site, which may include your Internet Protocol (IP) address, browser type and settings, device and operating system information, the page that referred you, and the date and time of access, recorded in server and edge logs.
4.3 Local storage on your device
The Site is a Progressive Web App and may store files in your browser cache by means of a service worker, so that pages load quickly and remain available offline. It may also save small items of functional data in your browser's local storage, such as your chosen appearance, motion, and text-size preferences. This information stays on your device, is not transmitted to Amartya Yadav, and can be cleared at any time through your browser settings.
5. Service providers and third parties
Amartya Yadav relies on a small number of third-party service providers (the "processors") to operate the Site, and does not otherwise share personal data with third parties, except where required by law. Each processor acts on documented instructions and under its own published privacy terms. The categories below describe their roles. The identity of any specific processor will be disclosed to you on request. The Site self-hosts its typeface and embeds no third-party fonts, scripts, advertising, analytics, social media widgets, images, or media players, so visiting any page does not expose your data to any further party.
- Hosting and content delivery (Cloudflare Pages). The Site is built, served, and cached at the edge by Cloudflare Pages, part of Cloudflare, Inc. As the site's host and content delivery network, Cloudflare receives your IP address and standard request data in order to deliver pages, and may set a strictly necessary security cookie as described in the Cookie Policy. Cloudflare processes this technical data as Amartya Yadav's processor and under its own privacy policy at cloudflare.com/privacypolicy.
- Source code and deployment (GitHub). The Site's source code is maintained in a private repository on GitHub, from which Cloudflare Pages builds and publishes the Site. In the ordinary course of a deployment, limited technical request data may be processed by these platforms under their own terms.
- Search engine tools. Amartya Yadav uses the webmaster and indexing tools of one or more search engines to understand how the Site appears in search results. These tools provide aggregated, non-identifying statistics to Amartya Yadav, while any underlying search and click data is processed by the search provider on its own infrastructure and under its own terms.
These providers operate internationally, including in the United States. Where personal data is transferred outside your jurisdiction, it is done in reliance on recognised safeguards such as the European Commission's Standard Contractual Clauses or an equivalent mechanism offered by the provider. A complete list of the current processors and the safeguards applied is available on request.
6. Purposes and legal bases for processing
Amartya Yadav processes personal data only for the purposes and on the legal bases set out below, as required by Article 6 of the GDPR and the corresponding provisions of other applicable laws.
- To operate and secure the Site. Technical and log data is processed to deliver pages, maintain availability, and prevent abuse or attack. The legal basis is Amartya Yadav's legitimate interest in running a functioning, secure website, and the legitimate uses permitted under the DPDP Act.
- To comply with law. Personal data may be processed where necessary to meet a legal obligation or to establish, exercise, or defend a legal claim.
7. Cookies and tracking technologies
The Site does not set advertising, analytics, or profiling cookies, and does not track you across other websites. It uses no third-party analytics. Because no non-essential cookies are used, no cookie consent banner is required. Any storage the Site itself uses is strictly necessary or functional, as described in section 4.3, and none of it is used to track you or build a profile.
8. Data retention
The Site collects no data you submit, so there is nothing of that kind to retain. Server and edge logs are retained by Cloudflare for a limited period in the ordinary course of operations, after which they are deleted, unless a longer period is required to comply with a legal obligation or to defend a legal claim.
9. Your rights
Subject to the law that applies to you, you have some or all of the following rights regarding your personal data.
9.1 Rights under the GDPR (European Union and United Kingdom)
You have the right of access, rectification, erasure (the "right to be forgotten"), restriction of processing, data portability, and objection to processing, as well as the right to withdraw consent at any time without affecting processing carried out before withdrawal, and the right to lodge a complaint with your local supervisory authority.
9.2 Rights under the DPDP Act (India)
You have the right to access a summary of your personal data and its processing, the right to correction, completion, updating, and erasure, the right to grievance redressal, and the right to nominate another individual to exercise your rights in the event of death or incapacity.
9.3 Rights under the CCPA and CPRA (California)
You have the right to know what personal information is collected and how it is used, the right to access and delete it, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. Amartya Yadav does not sell or share personal information as those terms are defined under the CCPA and CPRA, and will not discriminate against you for exercising any right.
9.4 Other jurisdictions
Visitors covered by other frameworks, such as Brazil's LGPD or Canada's PIPEDA, may exercise the equivalent rights granted to them under those laws.
10. How to exercise your rights
To exercise any right, contact the site owner, Amartya Yadav. A reasonable request will be honored without charge and within the time required by the applicable law. Amartya Yadav may ask for information sufficient to verify your identity before acting on a request, in order to protect your data from unauthorised access.
11. Security
The Site is served only over an encrypted connection (HTTPS) and applies a set of modern security protections. While no method of transmission or storage is completely secure, reasonable technical and organisational measures are maintained to protect personal data against unauthorised access, loss, or misuse.
12. Children
The Site is not directed to children, and Amartya Yadav does not knowingly collect personal data from a child as defined by the law that applies to the visitor, including any person under the age of eighteen under the DPDP Act and any person under the age of sixteen under the GDPR. If you believe a child has provided personal data, contact Amartya Yadav and it will be deleted.
13. Do Not Track and external links
Because the Site performs no cross-site tracking, no action is taken in response to browser Do Not Track signals, as there is no tracking to disable. The Site may link to external destinations, such as booksellers or reference sources, which are governed by their own privacy policies and lie outside Amartya Yadav's control.
14. Changes to this Policy
This Policy may be updated from time to time to reflect changes in practice or law. The "Last updated" date above indicates the latest revision, and continued use of the Site after a change takes effect constitutes acceptance of the revised Policy.
15. Governing law
This Policy is governed by the laws of India, without prejudice to any mandatory data protection rights you hold under the laws of your own country of residence.