Privacy

One thing runs: Google Analytics 4, added on 19 September 2026, so I can see which pages people actually read. It records the page you viewed, roughly where in the world you are, and which site or search sent you, and it sets its own cookies to recognise a returning visit. It does not know your name, and I never combine it with anything else.

There is no advertising tag, no session cookie of my own, and no account. Nothing else leaves your browser — the typefaces, the images and the scripts are all served from this server, which is why there is no font request to Google on this site.

There is no consent banner here yet. I would rather say that plainly than imply a choice I have not built. If you do not want the analytics, any tracker blocker stops the single request that starts it, and nothing on this site breaks when you do — I have checked.

You give me your name, your email address, optionally your company, which kind of help you are after, and your message. The form also records the IP address, browser and operating system it was submitted from, which is how a form tells a person from a script.

That submission does three things: it sends you a confirmation, it sends me a copy, and it is filed in a private spreadsheet and a contact record so I can find the thread again months later. I keep it while there is a live reason to — an open conversation, work in progress, or an accounting obligation — and delete it when there is not.

If you would rather not use the form, LinkedIn reaches me too. Then the message sits with LinkedIn under their policy instead of mine.

Your address, and nothing else. It is used for exactly one thing: sending you a note when I publish one. It is never sold, never shared, and never used to pitch you something you did not ask about.

Reply “stop” to any of them, or ask me through the contact page, and I remove the address. There is nothing to unwind afterwards — it is a list of addresses, not a profile.

If you only read the site, one company is involved: Google, for the analytics above. Your browser sends the page view to their servers, which discloses your IP address and user agent to them under their own terms. I see nothing beyond the aggregate reports.

If you use a form, two more are involved, and only as infrastructure — neither is given your data for their own purposes. Amazon Web Services carries the email, from a region in the EU. Google holds the private spreadsheet the submission is filed in. The contact record and this website both sit on servers I operate, and the web server is in the United States, so a form submission crosses borders on its way to me.

That is the complete list. There is no analytics on the emails, no advertising network, no data broker, and no third party that gets your details in exchange for a free tier.

The web server in front of this site keeps standard access logs — IP address, timestamp, requested path, user agent — for operational and security purposes. They are not used to build a profile of anybody, are not shared, and are not linked to anything else.

You can ask what I hold about you, ask for it to be corrected, ask for a copy of it, or ask for it to be deleted where I am not legally required to keep it. You can also object to me holding it at all. Ask through the contact page and I will do it myself — there is no ticket queue between you and the data.

The data controller is Layap Infotech Pvt. Ltd., Gurugram, India.

The date in the header is the last time it changed, and it changes when the site does. I update this page in the same commit that adds whatever it is describing, rather than afterwards, because a privacy page that lags the thing it documents is worse than not having one.