Privacy.

Analytics

This site uses Plausible Analytics, which is cookieless and does not collect personal data. It records aggregate metrics (page views, referrers, browser type, country at the country level) using only the IP address of the request, which is discarded immediately after generating a daily salted hash to de-duplicate visits within a day. No persistent identifier is stored, and no cross-site tracking is possible. This is why this site shows no cookie banner: there is no consent to obtain.

Newsletter

If you subscribe, your email is sent to Kit (formerly ConvertKit), which stores it on its servers and uses it solely to deliver newsletters you've subscribed to. Subscriptions use double opt-in: you must confirm via a verification email before any newsletter is sent. You can unsubscribe via a one-click link in every email. Your email is never sold, shared, or used for any purpose beyond sending newsletters from this site.

Contact form

Submissions via the contact form are sent via Web3Forms, which relays the submission to my email and does not persist the contents beyond the relay window. The data you submit (name, email, an optional organization, and your message) is used solely to reply to you. It is not used for marketing.

Data handling

Submissions and subscription records are retained for as long as the working relationship or subscription is active, and discarded thereafter. If you would like your data deleted at any time, email me at the address on the contact page and I'll process the deletion within seven days.

Security

This site is a static HTML/CSS site with no database, no PHP, and no server-side code. It serves with strict transport security (HSTS), a tight Content Security Policy, and additional defensive headers verifiable at securityheaders.com. Security reports are accepted per RFC 9116.

Cookies

This site sets no cookies of its own. The analytics tool (Plausible) is cookieless by design. Newsletter and contact form submissions are routed to third parties (Kit and Web3Forms) . those services use cookies on their own domains, not on this one. The absence of a cookie banner is intentional: there is no consent to obtain because no cookie is set.

Legal basis for processing

This site is operated from Bengaluru, India. Personal data you submit (email for the newsletter, name + email + optional organization + message for the contact form) is processed under the Digital Personal Data Protection Act, 2023 of India. The role of this site is "Data Fiduciary" as defined in the act. You may exercise the rights granted to "Data Principals" under the act, right to access, correction, erasure, and grievance redressal, by contacting the address below.

For European visitors, the General Data Protection Regulation (GDPR) provides equivalent rights. The lawful basis for processing is your consent (newsletter signup is double opt-in; contact form submission is an explicit, voluntary action).

Copyright and takedown

Content on this site is © Manish Pandey unless otherwise attributed. Quoting with attribution to manishpandey.co.in is welcome. If you believe content here infringes your copyright, or material has been republished elsewhere without attribution, send a notice to legal@manishpandey.co.in with: a description of the work, the URL of the alleged infringement, your contact details, and a good-faith statement that the use is unauthorised. Notices compliant with section 512(c) of the U.S. DMCA will be acted on within seven business days.

Grievance officer

Per Section 10 of the DPDP Act and Rule 3(11) of the IT Rules, 2021, the grievance officer for this site is the operator directly. Reach hello@manishpandey.co.in with the subject "Privacy grievance"; a response will be sent within fifteen business days.

Changes to this policy

If this policy materially changes, the modified date below will be updated and existing newsletter subscribers will be notified in the next dispatch.

> Last updated 2026-05-18.