Privacy Policy

Effective date: September 23, 2026

This policy describes how information is collected when you use surajitsen.in, including its articles, comments, and site features.

Information the site handles

Site operation and security

When you visit, the hosting platform and application receive technical request information such as your IP address, requested path, browser user-agent, response status, and timing. In production, application access logs include the IP address, requested URL, and user-agent. The site also uses IP addresses temporarily in memory for rate limiting and abuse detection. Security events may be written to application logs.

Hosting, database, and logging providers may process or retain information under their own settings and policies; their retention periods are not controlled by this site.

Analytics, browser identification, and advertising

Google Analytics loads whenever you visit, regardless of your choice in the privacy popup. It may receive page-view, browser, device, referral, and network information and may use cookies or similar identifiers.

PostHog, Umami, GoatCounter, FingerprintJS, and Google AdSense are optional. They load only if you choose “Yes, allow optional tools” in the popup. If you choose “No, thanks,” or have not made a choice, those scripts stay off. If enabled, they may receive page-view, browser and device details, referral information, and online identifiers; FingerprintJS is used for browser identification, and Google AdSense may use cookies or similar identifiers for advertising.

Your choice is saved in this browser, and you can change it later using Privacy choices in the footer. If you turn the optional tools off after turning them on, that change takes effect on your next page visit; a script that has already loaded cannot be unloaded from the page you are viewing. If this browser cannot save your choice, the popup may appear again on a later visit.

Comments and engagement

The site uses its own comment system; it does not use Giscus. When you submit a comment, the application receives the comment text, an optional display name, the article slug, an avatar seed, and the submission time. There is no email field. Visitor comments are held for moderation and may be displayed publicly after approval. Do not include information you do not want published.

The comment record includes a hash derived from the request IP and a month value to help prevent abuse. The raw IP is not stored in the comment record, but it may be processed in the separate access and security logs described above. Comments are stored in the configured database and kept until they are removed. To request removal or correction, email me using the address below.

Page views are stored as totals for each article. Feedback and likes are also counted; these aggregate totals do not have an automatic expiry. An IP-derived fingerprint is used to limit repeat submissions. Fingerprints become eligible for cleanup after 24 hours and are removed during a later cleanup. The site does not store a visitor’s IP address alongside an individual page-view count.

How information is used

Information is used to serve pages, secure and maintain the site, measure aggregate readership, prevent repeated or abusive submissions, moderate comments, show approved comments, and display advertising. If you email me, I use the information in your message to respond.

The site does not ask visitors for an email address or create visitor accounts. If you choose to post a comment, its display name and text may become public after moderation.

Third-party services and links

Analytics, browser-identification, advertising, anti-bot, hosting, database, and logging providers process information as needed to provide their services. Their handling of information is governed by their own policies. The site does not control those providers’ independent processing.

The site also links to external services such as GitHub and Discord. Those services receive information from your browser if you follow a link or otherwise interact with them.

India data-protection information

India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 have phased commencement dates. This policy describes the site’s current practices; it is not a statement that every provision is already in force or that this page alone satisfies every legal requirement. The official notifications and current materials are linked below.

You may email sensurajit@proton.me to ask about information associated with you, request correction or deletion, or raise a privacy concern. I will review requests under the laws that apply and may ask for details needed to locate the relevant information.

Children

This site is not intended for children under 18. It does not knowingly invite children to submit personal information. If you believe a child has submitted personal information, contact me so I can review it.

Changes and references

This policy may change as site features or applicable requirements change. The effective date above will be updated when the policy changes.