Privacy.

Analytics

This site uses Google Analytics 4 to understand which writing is read and how visitors arrive. The analytics script loads by default on production pages (it is skipped for automated browsers). Nothing else on the site depends on it: every page works identically with analytics blocked.

Google Analytics sets first-party cookies (named _ga and _ga_<id>) to distinguish repeat visits and aggregate page views, referrers, approximate location, device, and browser. This data is processed by Google as described in its privacy policy. Advertising features and Google Signals are not enabled. To opt out, use your browser's tracking protection or a content blocker, or install Google's opt-out browser add-on.

Newsletter

If you subscribe, your email is sent to Kit (formerly ConvertKit), which stores it on its servers and uses it solely to deliver newsletters you've subscribed to. Subscriptions use double opt-in: you must confirm via a verification email before any newsletter is sent. You can unsubscribe via a one-click link in every email. Your email is never sold, shared, or used for any purpose beyond sending newsletters from this site.

Contact form

Submissions via the contact form are sent via Web3Forms, which relays the submission to my email and does not persist the contents beyond the relay window. The data you submit (name, email, an optional organization, and your message) is used solely to reply to you. It is not used for marketing.

Data handling

Submissions and subscription records are retained for as long as the working relationship or subscription is active, and discarded thereafter. If you would like your data deleted at any time, email me at the address on the contact page and I'll process the deletion within seven days.

Security

This site is a static HTML/CSS site with no database, no PHP, and no server-side code. It serves with strict transport security (HSTS), a tight Content Security Policy, and additional defensive headers verifiable at securityheaders.com. Security reports are accepted per RFC 9116.

Cookies

The only cookies this site sets are the Google Analytics first-party cookies described above. There are no advertising, session, or preference cookies. Your theme choice (dark or light) is stored in your browser's local storage; it is not a cookie and is never sent to any server. Newsletter and contact-form submissions are routed to third parties (Kit and Web3Forms); those services may use cookies on their own domains, not on this one.

Legal basis for processing

This site is operated from Bengaluru, India. Personal data you submit (email for the newsletter, name + email + optional organization + message for the contact form) is processed under the Digital Personal Data Protection Act, 2023 of India. The role of this site is "Data Fiduciary" as defined in the act. You may exercise the rights granted to "Data Principals" under the act, right to access, correction, erasure, and grievance redressal, by contacting the address below.

For European visitors, the General Data Protection Regulation (GDPR) provides equivalent rights. Newsletter signup relies on your consent (double opt-in), and contact-form submission is an explicit, voluntary action. Analytics relies on a legitimate interest in understanding readership: it runs by default, uses no advertising features, and can be blocked with tracking protection or a content blocker without affecting the site. To object to analytics processing, or to exercise any other right, use the contact address below.

Copyright and takedown

Content on this site is © Manish Pandey unless otherwise attributed. Quoting with attribution to manishpandey.co.in is welcome. If you believe content here infringes your copyright, or material has been republished elsewhere without attribution, send a notice to legal@manishpandey.co.in with: a description of the work, the URL of the alleged infringement, your contact details, and a good-faith statement that the use is unauthorised. Notices compliant with section 512(c) of the U.S. DMCA will be acted on within seven business days.

Grievance officer

Per Section 10 of the DPDP Act and Rule 3(11) of the IT Rules, 2021, the grievance officer for this site is the operator directly. Reach hello@manishpandey.co.in with the subject "Privacy grievance"; a response will be sent within fifteen business days.

Changes to this policy

If this policy materially changes, the modified date below will be updated and existing newsletter subscribers will be notified in the next dispatch.

> Last updated 2026-07-06.