Privacy policy

There is no analytics on this site. No Google Analytics, no tag manager, no advertising pixel, no heatmap or session recording, and no third-party script of any kind that watches what you do here.

The site sets no cookies and stores nothing in your browser. That is why there is no cookie banner: there is nothing to consent to, and a banner asking permission for consent it does not need would be theatre.

Nothing you do here is used to build a profile, and nothing is sold, rented or shared with anyone for marketing. There is no mailing list to be added to.

If you send the contact form, it submits your name, your email address, an optional subject and your message. That is composed into an email and delivered to my inbox through Resend, an email delivery provider. It is not written to a database, because this site does not have one.

Your email address is set as the reply-to on that message, so replying to you is a single click. Your message then lives in my mailbox in the same way any email you sent me directly would, for as long as the enquiry is useful — and you can ask me to delete it at any time.

The form also carries a hidden field that humans never see. Anything filled into it identifies the submission as automated, and it is discarded without being sent. If you use a screen reader or an unusual browser and this ever affects you, email me directly instead.

To stop a script flooding the inbox, the contact endpoint counts how many submissions have arrived from a given IP address in the last ten minutes. Those addresses are held in the server process’s memory, they are never written to disk or to a database, and they disappear when the window passes or the server restarts.

They are not connected to anything else, not used to identify anyone, and not available to me — I never see that list.

Like any website, this one is served by a hosting provider, which keeps standard server logs — the requested URL, a timestamp, an IP address, a user agent — for its own operational and security purposes. That happens for every site on the internet and it is outside my control, though it is worth stating rather than implying it does not happen.

Resend processes the contents of a submitted contact form in order to deliver it, under its own privacy terms. This site is also verified in Google Search Console, which reports aggregate search statistics — which queries showed the site, how often it was clicked — and never identifies an individual visitor.

Because the only personal data this site receives is what you deliberately type into the contact form, exercising your rights over it is straightforward: email me and ask what I hold, ask for a copy, ask for a correction, or ask me to delete it. I will do it and confirm when it is done.

Under India’s Digital Personal Data Protection Act 2023 you have those rights by law, and if you are in the EU or UK the GDPR gives you equivalent ones. Either way the practical route is the same address: design.harsh25@gmail.com.

This is a professional portfolio offering services to businesses. It is not directed at children and does not knowingly collect anything from them.

If this site ever adds analytics, a cookie, an embedded third-party service or anything else that changes the description above, this page changes on the same day and the date at the top moves with it. The date is not touched for anything else.