Privacy
What this site collects, why, and how to have it removed.
This is a personal portfolio. It has no accounts, no shop and no advertising. It uses Google Analytics to count visits. The only time it handles your personal data is when you deliberately send it, through the contact form or the newsletter box. This page explains exactly what happens then.
The short version:
- Google Analytics counts visits and sets its own cookies. There is no advertising code and no other tracking on any page.
- The contact form emails your message to me and nothing else. It is not stored in a database.
- The newsletter box hands your email address straight to Substack.
- You can ask me to delete anything you have sent, at any time, by emailing divyanshsharma7117@gmail.com.
Who runs this site
Divyansh Sharma, based in Jaipur, Rajasthan, India. I am the person responsible for the data described here: the “data controller” under EU law, the “data fiduciary” under India’s Digital Personal Data Protection Act, 2023. Contact: divyanshsharma7117@gmail.com.
What this site collects
The contact form
When you submit the contact form, you send your name, your email address and your message. You can optionally add your company, the type of work you need and a rough timeline. This is used for one purpose: to read your enquiry and reply to it. The submission is delivered to my inbox as an email through Resend, an email-delivery service. It is not written to any database or logged anywhere else. Once it arrives, it lives in my email like any other message.
Spam protection
At the moment you submit the form, the server briefly holds your IP address in memory so it can limit repeated submissions from the same source. It is never written to disk, never logged, and is discarded within minutes when the server process recycles.
The newsletter box
The “Subscribe to my Substack” field sends your email address directly to Substack, which runs the newsletter and stores the subscriber list. I do not keep a separate copy. You can unsubscribe from the link at the bottom of any Substack email, which removes you completely.
Hosting and server logs
The site is hosted by Vercel. Like any web host, Vercel processes the standard technical data your browser sends with every request (IP address, browser type, the page requested and the time) to serve the site and keep it secure. I do not have a dashboard that ties this to you, and I do not use it to build any profile.
Analytics
This site uses Google Analytics (Google LLC) to understand how many people visit, which pages they read and roughly where they come from. It sets its own cookies (named _ga) and records standard usage data: pages viewed, time on page, device and browser type, approximate location at city level, and the site that sent you here. I only look at it as totals. It is not used for advertising, and I do not combine it with anything you send me. You can opt out with Google’s opt-out browser add-on or by blocking cookies for this site.
Fonts
The typefaces (Archivo, Inter and JetBrains Mono) are served from this site’s own server, not from Google Fonts or any other outside host, so opening a page does not hand your IP address to a font provider.
What it does not do
No advertising, no social-media tracking pixels, no embedded third-party widgets. The only cookies are Google Analytics’ own, described above. It also uses your browser’s local storage for two small conveniences: remembering whether you chose the light or dark theme, and holding a half-written contact message so a refresh does not lose it. Both stay inside your browser, are never transmitted anywhere, and the draft clears when you send it, close the tab, or after a day.
Where your data goes
The services above act on my behalf as processors:
- Resend (Resend, Inc., United States) sends the contact-form email.
- Substack (Substack Inc., United States) runs the newsletter and holds the subscriber list.
- Vercel (Vercel Inc., United States) hosts and serves the site.
- Google Analytics (Google LLC, United States) measures visits.
All four are based in the United States, so data sent through them is processed on servers outside India and outside the EEA. I do not sell or share your data with anyone else, and there is no other party with access to it.
How long it is kept
Contact-form emails stay in my inbox for as long as I need them to handle your enquiry and any work that follows from it. Email me and I will delete the thread. The IP address used for spam protection lasts minutes. Newsletter subscriptions last until you unsubscribe. Vercel’s server logs follow Vercel’s own retention schedule. Google Analytics keeps visit data for at most 14 months.
Your rights
Wherever you live, you can email me to see what of yours I hold, to correct it, or to have it deleted, and I will act on it. If you are in the EU or UK, the GDPR also gives you the right to object to or restrict processing, and to data portability. The lawful bases I rely on are your consent and pre-contract steps you asked for (the contact form and the newsletter), and legitimate interest (keeping the site available and free of abuse, and understanding how it is used). If you are in India, the Digital Personal Data Protection Act, 2023 gives you rights of access, correction, erasure and grievance redressal on the same email address.
If you think I have handled your data wrongly and I have not resolved it, EU and UK users can complain to their local data protection authority, and users in India can escalate to the Data Protection Board of India.
Children
This site is aimed at founders and businesses, not children, and I do not knowingly collect data from anyone under 18.
Changes to this policy
If anything here changes in a way that matters, I will update the date at the top of the page. This version is dated 29 September 2026.
Contact
Any question about this policy or your data: divyanshsharma7117@gmail.com.




















