Privacy policy

Anant Navadiya, Sechserstraße 2, 92224 Amberg, Germany. Email: contact@anantnavadiya.com. Full details are in the Impressum.

The site is hosted by Vercel Inc. (USA). When you load a page, Vercel processes technical data such as your IP address, browser, and the requested URL to deliver the page and protect the service. Vercel is certified under the EU-US Data Privacy Framework. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

The database and uploaded images are hosted by Supabase in the EU (Frankfurt).

To prevent abuse, requests to the contact form, newsletter signup, analytics, and Mabel are counted per visitor using a one-way hash of the IP address (not the address itself). These counters are deleted after about a day.

I use my own cookieless analytics to see which pages are read. No cookies or other identifiers are stored on your device for this, and no third-party tracking service is involved. For each page view I record:

• the page, the referring website (domain only), and any campaign tag in the link
• country, region, and city, derived from your IP address by the host
• device type, browser, operating system, and preferred language
• how long the page was visible, how far you scrolled, and loading performance (Core Web Vitals)
• whether you used the contact form, the newsletter form, Mabel, or clicked a link to another site (only its domain)

Your IP address is not stored. To tell visits apart, I use a one-way hash of your IP address, browser, the current date, and a secret key. Because the date is part of it, the identifier changes every day, so visits on different days aren't linked. Statistics are deleted after about 13 months. If your browser sends a Do Not Track or Global Privacy Control signal, nothing is recorded. Legal basis: legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR).

Some features remember your choices in your browser's local storage: light or dark theme, reading mode, colour scheme, saved articles, reading positions, and Mabel's appearance. This data stays on your device and is never sent to me. It's stored only because you asked for the feature (§ 25(2) TDDDG). Clearing your browser data removes it.

When you send a message, I store your name, email address, subject, and message so I can read and answer it. Legal basis: your request (Art. 6(1)(b) GDPR) and my legitimate interest in replying (Art. 6(1)(f)). Messages are deleted when they're no longer needed, or on request.

Notification and reply emails are sent through Resend Inc. (USA), which processes the email addresses and content involved for delivery. Resend is certified under the EU-US Data Privacy Framework.

If you sign up, I store your email address, the page you signed up on, and when you signed up and confirmed. You're only added after you confirm through the link in the confirmation email (double opt-in). If you don't confirm, your signup is deleted after 30 days. When I publish a new article, I may email it to confirmed subscribers. For each email, I record which article was sent to you and when, so nobody receives the same article twice. I don't track whether you open these emails or click their links. Emails are sent through Resend. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time through the unsubscribe link in every email, your email app's unsubscribe button, or by contacting me.

If you unsubscribe, your address stays on file marked as unsubscribed so you aren't emailed again. If you ask me to delete it, your address and its record of sent articles are removed completely.

Questions you ask Mabel, along with the last few messages of the conversation and the page you're on, are sent to Google's Gemini API (Google LLC, USA, certified under the EU-US Data Privacy Framework) to generate an answer. Please don't share personal details in the chat.

To see what visitors want to know, I keep the text of your questions for 90 days. Email addresses, links, and phone numbers are removed before storage, and nothing that identifies you (like your IP address) is kept with them. I may use an AI model to summarise these questions into topics. Legal basis: legitimate interest in providing and improving the companion (Art. 6(1)(f) GDPR).

Fonts are served from this site itself. If a different font is selected in the design settings, it may instead be loaded from Fontshare (Indian Type Foundry) or Google Fonts (Google LLC). Your browser then connects to their servers, which receive your IP address. Legal basis: legitimate interest in a consistent presentation (Art. 6(1)(f) GDPR).

You have the right to access, correct, and delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time with effect for the future. Contact me at the address above.

You can also complain to a data protection authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA) in Ansbach.