Privacy Policy

Effective date: 2026-05-26

Who We Are

The data controller is Alex Narayan. You can reach me at [email protected].

What Data We Collect

Automatically: This blog does not collect personal data automatically. There are no analytics scripts, no tracking pixels, no third-party cookies, and no server-side logs accessible to me beyond what GitHub Pages provides (which I do not access).

Voluntarily: If you email me via the feedback link on any post, I receive your email address and whatever you write. I use this only to reply and do not share it.

Stripe: The “Buy me a hot chocolate!” link goes to Stripe’s hosted checkout page. Stripe processes your payment information. I do not see your card details. See Stripe’s privacy policy for details.

LocalStorage

This blog uses browser localStorage for two purposes:

Key	Purpose	Category
`consent_state_v1`	Remembers your cookie consent preferences	Strictly necessary
`rp_history`	Stores URLs and tags of posts you have visited to power content recommendations (“You might also like”)	Functional (opt-in)

No data leaves your browser. rp_history is never sent to any server. It is only used client-side to suggest related posts based on your reading history. This feature requires your explicit consent and is not active by default.

Legal Basis

Consent (Art. 6(1)(a) GDPR): For functional localStorage (rp_history) and any future analytics or advertising services.
Legitimate interest (Art. 6(1)(f) GDPR): For strictly necessary operations (consent storage, site functionality).

Third-Party Services

Currently: None. This blog serves no third-party scripts, analytics, or advertising.

In the future, I may add:

Google AdSense: Would serve personalized or non-personalized ads. If added, you will be asked for separate explicit consent and this policy will be updated before any ad scripts are deployed.
Cloudflare R2: Used as a CDN for images uploaded to blog posts. Cloudflare may log access metadata (IP, user agent) per their standard CDN operation. See Cloudflare’s privacy policy.

You have the right to:

Access — request a copy of any personal data I hold about you
Rectification — correct any inaccurate data
Erasure — request deletion of your data (“right to be forgotten”)
Restriction — limit how your data is processed
Portability — receive your data in a structured, machine-readable format
Objection — object to processing based on legitimate interest
Withdraw consent — at any time, via the “Manage Cookies” link in the footer

To exercise any of these rights, email [email protected]. I will respond within 30 days.

Data Retention

consent_state_v1: stored for 6 months, after which you will be asked again
rp_history: stored until you clear your browser data or withdraw functional consent
No personal data is stored on any server

Changes to This Policy

This policy may be updated. The effective date at the top will reflect the most recent revision.

Contact

Alex Narayan — [email protected]