Privacy
Last updated
The short version
- This is the personal website of Kunj Hirapara, a software engineer in Ahmedabad, India.
- Nothing is sold, and nothing is used for advertising.
- Google Analytics runs only if you allow it.
- Messages, questions to Ask and guestbook notes are kept only as long as they are useful, and you can ask for any of them to be deleted.
- Questions about any of this: contact@kunjdeveloper.com.
Who is responsible
Kunj Hirapara, Ahmedabad, Gujarat, India, runs this site and decides what happens to the data on it (the "controller" under the GDPR, the "data fiduciary" under India's DPDP Act). He is also the contact for privacy questions and the Grievance Officer under India's IT Rules: contact@kunjdeveloper.com. He acknowledges a request within 2 working days and answers within 30 days.
What is collected, and why
When you send a message
The contact form stores your name, email address and message so Kunj can reply. To stop spam and abuse it also stores the IP address and browser your message came from, and removes those after 30 days. A copy of the message is sent to Kunj's own email and phone notifications (through Resend, Telegram or Slack). The message is kept while the conversation, and any work that follows from it, is ongoing, and deleted when you ask. Basis: answering you, at your request.
When you use Ask
Ask is an AI assistant (Google Gemini) that answers questions about Kunj from this site's content. Your question is sent to Google with that content. Email addresses and phone numbers in a question are removed before it leaves this site. The question is stored here with its answer, or with the reason there was none when Ask could not answer, without your IP address or browser, so Kunj can see what people want to know and improve the answers; they are deleted after 90 days. This site uses the free tier of the Gemini API, under which Google may use what it receives to improve its products and people at Google may review it. So please leave out anything personal. For that reason Ask is not offered to visitors in the European Economic Area, Switzerland or the United Kingdom. Answers can be wrong; the pages themselves are the source of truth. Ask is meant for people aged 18 and over. Basis: your choice to ask, and Kunj's legitimate interest in answering.
When you sign the guestbook
A note stores what you wrote, the name you give (optional) and your country as Cloudflare reports it. Once published, the note, name and country are public. Each note is checked by automatic rules and then by Google Gemini (only the note and the name are sent; on the free tier, notes from the European Economic Area, Switzerland and the United Kingdom skip the AI and wait for Kunj). Kunj reviews the notes the checks hold back and can remove any note. A published note stays until you ask Kunj to remove it or it is removed under the guestbook rules. Notes that are never published are deleted after 180 days. Reporting a note stores nothing about the person reporting. The guestbook is for people aged 18 and over. Basis: your choice to sign.
Live presence and visit counts
While a page is open, your browser keeps a connection to this site so it can show how many people are here and what is happening right now. The server holds, in memory only, the page you are on, your country (from Cloudflare) and your IP address (to cap connections from one address); all of it is gone when you leave. Visits are counted as a number per day, with nothing about who visited, and nothing is stored on your device to count you. The live activity panel shows other visitors only as "a visitor from <country>" with the page they opened or what they did (asked a question, took a visitor pass, signed the guestbook), never what they asked. Basis: Kunj's legitimate interest in a site that feels alive, kept to data that does not identify you.
The visitor pass
If you take a visitor pass, the server stores its number and when it was issued, nothing about you. Your browser keeps the pass itself. Its number and your country appear in the live activity panel.
Analytics (only if you allow it)
With your permission, Google Analytics 4 measures which pages are read and which buttons are used, using the cookies listed below. It receives the page address, your approximate location, device and browser details; it does not keep your IP address. Google signals and advertising features are off, and nothing typed into Ask or the contact form is sent to it. Data is kept for 14 months. You can change your answer at any time: . A browser that sends Global Privacy Control is treated as a "no". This site does not respond to Do Not Track, which has no agreed meaning, but nothing tracks you unless you opt in. Basis: your consent.
Keeping the site running
Every request passes through Cloudflare (delivery and attack protection) to a server Kunj runs on Oracle Cloud. Like any web server, they log requests (address, time, page, browser) for security and troubleshooting, for a limited period. IP addresses are also held in memory for a few minutes to an hour to rate-limit forms. Basis: legitimate interest in a secure site, and India's security rules.
What is stored on your device
| Name | Type | Purpose | Kept |
|---|---|---|---|
| kd-consent | Local storage | Your answer to the analytics question, so it is not asked on every page | Until you clear it |
| theme | Local storage | Light or dark, if you switch it | Until you clear it |
| kd-visitor-pass | Local storage | Your visitor pass, only if you take one | Until you clear it |
| ed:section | Session storage | Which homepage section to scroll to after following a link | Until the tab closes |
| _ga, _ga_<id> | Cookies (Google Analytics) | Telling visits apart, only if you allow analytics | Up to 2 years, or until you withdraw |
Everything except the analytics cookies is needed for something you asked for, so it is not behind the analytics question. Cloudflare may set its own security cookie if it needs to tell a person from a bot. The admin area sets sign-in cookies for Kunj only.
Who else receives data
- Cloudflare (USA, worldwide network): delivers and protects every page.
- Oracle Cloud: hosts the server and database.
- Google (USA): Gemini for Ask and guestbook checks; Analytics only with your consent.
- Resend, Telegram, Slack: carry contact-form notifications to Kunj.
Some of these are outside your country, including outside India and the European Union. Each handles data under its own terms; none may use it for advertising on this site's behalf. Nothing is sold or shared for advertising, as California law defines those words.
Your rights
Wherever you are, you can ask to see the data held about you, have it corrected or deleted, object to its use, or withdraw a consent you gave. Email contact@kunjdeveloper.com; you will not be asked for more information than is needed to find your data. If you are unhappy with the answer you can complain to your data protection authority: in India, the Data Protection Board of India; in the EU or UK, your national authority (in the UK, the ICO).
Children
This site is not aimed at children. Ask and the guestbook are for people aged 18 and over. If a child has sent personal information, email contact@kunjdeveloper.com and it will be deleted.
Security
Pages are served over HTTPS, the database is not reachable from the internet, the admin area needs a password, and stored data is kept to what is listed here. If a breach ever put your data at risk, you would be told, as would the authorities the law requires.
Changes
When this page changes, the date at the top changes too. Significant changes are noted here.