Privacy Policy

This is the privacy policy for the personal website at guptasachinn.com (the "site"), operated by Sachin Gupta as a personal, non-commercial portfolio and writing project. It explains what limited data the site handles when you visit, why, and the choices you have.

The short version. The site collects almost nothing. It uses privacy-friendly, cookieless analytics, keeps basic server logs, and counts total visits with a single anonymous number. There are no tracking cookies, no accounts, no sign-up forms, no advertising, and nothing is sold or shared for marketing. Because there are no non-essential cookies, there is no cookie-consent banner to click through.

Who is responsible

The site is run by Sachin Gupta (San Jose, California, USA), acting as an individual. For any question about this policy or your data, the best way to reach me is via the contact links in the footer (LinkedIn). See Contact below.

What the site collects, and why

1. Usage analytics (cookieless)

The site uses Vercel Web Analytics to understand basic, aggregated traffic, such as which pages are viewed and roughly where visits come from. It does not use cookies. Instead, a visitor is counted using a hash derived from the incoming request; that hash resets every 24 hours and cannot be used to track you across days or across other websites. No personally identifying information is recorded, and analytics data is not tied to your IP address or to you as an individual. Details are in Vercel's analytics privacy documentation.

2. Server logs

Like almost every website, the hosting platform (Vercel) may automatically process standard technical information when a page is served, such as your IP address, browser type, and the time of the request. This is used to operate the site, keep it secure, and diagnose problems, and is handled under Vercel's own retention and security practices. See Vercel's privacy policy.

3. Visit counter

The footer shows a total visit count. This is a single number that goes up by one per visit, stored with Upstash (a hosted Redis service). It stores no information about who you are, no IP address, and nothing that can be traced back to you.

Cookies and local storage

The site does not use cookies, and it does not store anything in your browser to identify or track you. The analytics are cookieless, and there are no advertising or cross-site cookies. That is why you will not see a cookie-consent pop-up.

Third parties

The site relies on a small number of service providers:

• Vercel, which hosts the site and provides the cookieless analytics.
• Upstash, which stores the single visit-count number.
• Fonts are self-hosted from this domain, so loading a page does not send your data to Google or any font provider.
• Embedded media. A few pages may embed video using YouTube's privacy-enhanced (no-cookie) mode. If you press play, YouTube may process data under its own policies; nothing is sent to YouTube until you interact with the player.

These providers may process data on servers outside your country, including in the United States, as part of delivering the site.

Legal basis (for visitors in the EU, EEA, and UK)

Where the GDPR or UK GDPR applies, the limited processing above (basic analytics and server logs) is carried out on the basis of legitimate interests: understanding basic traffic and keeping the site secure and working, in a way designed to be minimal and privacy-friendly.

Your rights

EU, EEA, and UK visitors. You have rights under the GDPR, including to access, correct, delete, restrict, object to, or port your personal data, and to complain to your local data protection authority. In practice the site holds almost nothing that can identify you, so there is usually little to act on, but I will help with any request I reasonably can.

California residents. This is a personal, non-commercial site and is almost certainly not a "business" covered by the CCPA/CPRA. Regardless, I do not sell or share personal information, and I do not use it for cross-context behavioral advertising. If you are a California resident with a question about your data, contact me and I will respond.

Data retention

The analytics visitor hash is discarded within 24 hours; only aggregated, anonymous counts remain. Server logs are retained according to Vercel's policies. The visit counter is a single running number that holds no personal data.

Children

The site is not directed at children, and I do not knowingly collect personal data from anyone under 16.

Changes to this policy

I may update this policy from time to time. When I do, the "Last updated" date at the top will change. Material changes will be reflected here on this page.

Contact

Questions about this policy or your data? Reach me through the links in the site footer (LinkedIn is the most reliable). See also the Terms of Use.