Privacy policy

This is a personal portfolio site run by Yajat Dureja. There is nothing to sign up for — the only way you can hand it personal data is the contact form. This page explains what happens to that data.

1. Information collected

• Contact form data: the name, email address, subject and message you type. That is the whole list — nothing else on that form collects anything about you.
• Technical data: your IP address and browser user-agent string, used for rate limiting, spam checks and basic security. Your IP address is not retained after a submission is processed.
• Analytics data: page views, referrers, approximate location, device and browser type, and performance timings — measured in aggregate, not used to identify you.
• Support communication data if you email me directly rather than using the form.

No payment details are collected, because nothing here is sold. No dark patterns, no pre-ticked boxes, no “we and our 900 trusted partners”.

2. How the information is used

• To read your message, reply to it, and acknowledge it arrived.
• To detect and block spam, bots and abuse.
• To understand which pages get read, so the site can be improved.

Your address is never added to a mailing list, because I do not have a mailing list, because I do not want to write a newsletter.

3. Legal bases for processing

Where data protection law applies to you, processing rests on one or more of the following: your consent (you chose to send the message), the legitimate interest in operating a secure and functional website, and compliance with legal obligations.

4. Cookies and similar technologies

The site itself does not set advertising or tracking cookies of its own. The following may set cookies or store data in your browser:

• Cloudflare Turnstile — the “are you human” check on the contact form. It may store a short-lived token in your browser and sends a verification token plus your IP address to Cloudflare so the challenge can be validated. It is a privacy-preserving alternative to a CAPTCHA and does not track you across other websites. It asks whether you’re a human. Most visitors pass on the first try. For more information, please refer to Cloudflare’s Turnstile Privacy Addendum.
• Analytics and error monitoring — may set cookies or use similar technologies to measure traffic in aggregate and report faults.
• Essential cookies — used only to keep a signed-in session in the private administration area.

You can block or delete cookies in your browser settings. The contact form needs Turnstile to run in order to submit, so blocking it means emailing me directly instead.

5. Data security

Reasonable technical and organisational measures are in place to protect your information against unauthorised access, alteration and disclosure. No security system is perfect, but the safeguards are reviewed periodically.

6. Data sharing

Your personal data is never sold. It is shared only where necessary with:

• Third-party service providers used to operate the site — hosting, storage, email delivery, bot protection, analytics and error monitoring — strictly to the extent needed to perform that function.
• Law enforcement or regulators, where disclosure is legally required.

7. Data retention

Contact submissions are kept while they are still useful and deleted once they are not. Ask for yours to be deleted and it’s gone — there’s no retention team to escalate to, it’s me, and I’ll just do it. Backups and provider logs may persist for a limited period afterwards.

8. Your rights

• The right to know what has been stored about you and get a copy.
• The right to have inaccurate details corrected.
• The right to have your data deleted.
• The right to object to or restrict processing, subject to applicable law.

There is no form for this and no ticket queue. Ask or email [email protected] and it gets done.

9. International transfers

The site is operated from India, and service providers may process data outside your home country. Where that happens, their own contractual and technical safeguards apply.

10. Children

This site is not directed at children and does not knowingly collect their data. If a child has sent something through the contact form, let me know and it will be removed.

11. Third-party links

Project links, client sites and social profiles point to sites I do not control. Their privacy practices are their own; this policy covers only this site.

12. Changes to this policy

This policy may be revised, and the effective date at the top will be updated when it is.

13. Contact

Questions about privacy, or a deletion request, can go to [email protected] or through the contact page.

View terms of use