Privacy
What this site collects, stores, and shares — which is almost nothing.
This is a personal site: prose, photographs, a CV. It is built as static files and served as-is. It runs no analytics, sets no tracking or advertising cookies, embeds no third-party scripts, and loads no fonts or other assets from anyone else's servers. Reading requires no account and sends nothing; the one interactive feature — leaving a note on an essay — is strictly opt-in and described in full below. Nothing here is for sale. The site is built to know as little about you as it can. What follows is the full account of the little that remains.
What the site stores in your browser
At your request only, two things at most. When you pick a color theme or a reading mode, that choice is saved in your browser's local storage so the site remembers it next time; it never leaves your device, it is not an identifier, and clearing your browser data removes it. And if — and only if — you sign in to leave a note, the site sets a single first-party session cookie so it knows the note is yours. The cookie is HttpOnly (no script can read it), is never used to follow you around the site, and expires after thirty days or when you sign out. If you never sign in, the site sets no cookies of its own.
If you sign in to leave a note
Notes on essays require signing in with Google, Apple, or GitHub — not to identify you to me, but so a party you already trust vouches that you are a person. The site deliberately keeps almost none of what those providers offer. It stores exactly three things: which provider you used, the opaque subject identifier the provider assigns (a meaningless string — not your email), and the display name you go by there. Your email address is never stored; the provider's tokens are discarded the moment sign-in completes; no password ever exists here.
A note you post is held for review before it appears, and published notes show only your display name and what you wrote. To have a note — or your author record — corrected or deleted, write to the address below and it will be done.
What the host can see
The site is served by Cloudflare. Like any web server, Cloudflare records ordinary request data in its logs — your IP address, the time, the page requested, your browser's user-agent — and may set a strictly-necessary cookie (__cf_bm) to tell human visitors from bots. This exists to deliver and protect the site, not to profile you, and is governed by Cloudflare's privacy policy. I do not run any analytics over these logs.
Third parties
Only one, and only passively. The site advertises a Webmention endpoint at webmention.io so that replies and mentions published on other sites can be gathered. Simply reading a page here sends nothing to it; it comes into play only when some other site sends a mention of mine.
Outbound links may carry you elsewhere. Your browser, told to honor Referrer-Policy: strict-origin, reveals to those sites only that you arrived from this site's address — never which page you were reading.
Your data, and how to reach me
Because the site gathers no personal data beyond the server logs described above, there is little to request, correct, or erase. But if you have a question — including what, if anything, is held about you — write to yesudeep@gmail.com.
This note may change as the site does; the date above is when it was last revised. The site is provided as-is, without warranty.