Privacy policy

This policy describes how Tild("we", "us") collects and uses data when you visit Tild(the "Site"). We try to collect as little as we can and delete it when we don’t need it. This policy complies with the Digital Personal Data Protection Act, 2023 (India) and the GDPR for readers in the EU/UK.

1. What we collect

From every visitor (no consent needed)

Server logs.Our hosting provider (Vercel) records each request’s IP, user agent, URL, and timestamp for up to 30 days for security and abuse prevention.
Post view pings. When you read a post, we record an anonymized hash of your IP, your scroll depth, and time spent. No session cookie; we cannot re-identify you later.

With your explicit consent (via the cookie banner)

Google Analytics 4 — aggregate traffic metrics (pages viewed, devices, referrers). IPs are anonymized by Google.
Umami analytics — cookieless, aggregated session counts. Hosted on our own infrastructure.

When you sign in

Your Google account email, name, and avatar URL (via Supabase Auth).
Your comments, reactions, bookmarks, and reading history on the Site.

When you subscribe to the newsletter

Your email address and the date you subscribed.
Open and click events for each newsletter we send you (via Resend). You can opt out of open/click tracking — reply to any newsletter asking, and we’ll flag your subscriber record.

When you buy a product or subscription

Razorpay (our payment processor) collects payment card / UPI details directly. We never see or store them.
We store the Razorpay payment id, the product you purchased, the amount, and your subscription state.

2. Why we use it

Run the Site and respond to your requests.
Prevent abuse (rate limiting, detecting spam and automated traffic).
Improve content — if a post is getting low average read time, we might rewrite it.
Deliver newsletters you asked to receive.
Fulfil purchases and provide access to products you bought or subscribed to.

3. Who we share it with

Vercel (hosting — USA / global edge).
Supabase (database, auth, storage — EU / USA regions).
Razorpay (payments — India).
Resend (email delivery — USA).
Google (sign-in + analytics — USA).

We do not sell your data. We do not share it with advertisers beyond what Google AdSense (if enabled) collects for ad targeting, which is governed by Google’s ad policies.

4. How long we keep it

Server logs: 30 days.
Anonymized post views: 24 months.
Account data (profile, comments, bookmarks): for as long as your account exists.
Newsletter subscribers: until you unsubscribe.
Payment records: kept per Indian tax law (7 years from the end of the financial year).

5. Your rights

Under the DPDPA / GDPR you can:

Access the data we hold about you.
Correct inaccuracies.
Delete your account and all associated data.
Withdraw consent for analytics (via the cookie banner toggle).
Export your data.

Email mahendhar2004@gmail.com to exercise any of these. We’ll respond within 30 days.

6. Security

Every Supabase table has Row-Level Security enabled; unauthorised users literally cannot read or write data that isn’t theirs. All traffic is HTTPS. Secrets are stored in Vercel’s environment-variable vault, not in the code repository.

7. Changes to this policy

If we make material changes, we’ll post the new policy here and update the "Last updated" date. If the changes affect you (e.g. new third parties we share data with), we’ll email newsletter subscribers and prominently note it on the home page for at least 30 days.

8. Contact

Jurisdiction for disputes is Hyderabad, India. For anything else, mahendhar2004@gmail.com.

1. What we collect

From every visitor (no consent needed)

Server logs.Our hosting provider (Vercel) records each request’s IP, user agent, URL, and timestamp for up to 30 days for security and abuse prevention.

Post view pings. When you read a post, we record an anonymized hash of your IP, your scroll depth, and time spent. No session cookie; we cannot re-identify you later.

With your explicit consent (via the cookie banner)

Google Analytics 4 — aggregate traffic metrics (pages viewed, devices, referrers). IPs are anonymized by Google.

Umami analytics — cookieless, aggregated session counts. Hosted on our own infrastructure.

When you sign in

Your Google account email, name, and avatar URL (via Supabase Auth).

Your comments, reactions, bookmarks, and reading history on the Site.

When you subscribe to the newsletter

Your email address and the date you subscribed.

Open and click events for each newsletter we send you (via Resend). You can opt out of open/click tracking — reply to any newsletter asking, and we’ll flag your subscriber record.

When you buy a product or subscription

Razorpay (our payment processor) collects payment card / UPI details directly. We never see or store them.

We store the Razorpay payment id, the product you purchased, the amount, and your subscription state.

2. Why we use it

Run the Site and respond to your requests.

Prevent abuse (rate limiting, detecting spam and automated traffic).

Improve content — if a post is getting low average read time, we might rewrite it.

Deliver newsletters you asked to receive.

Fulfil purchases and provide access to products you bought or subscribed to.

3. Who we share it with

Vercel (hosting — USA / global edge).

Supabase (database, auth, storage — EU / USA regions).

Razorpay (payments — India).

Resend (email delivery — USA).

Google (sign-in + analytics — USA).

We do not sell your data. We do not share it with advertisers beyond what Google AdSense (if enabled) collects for ad targeting, which is governed by Google’s ad policies.