Privacy policy

What this covers

This site (ashishvrm.com) is run by one person — Ashish Verma, not a company with a data team. This page explains, plainly, what information gets collected when you read, get in touch, or subscribe, and what happens to it afterward.

Information collected

Just browsing

No account is required to read anything on this site. When analytics is switched on, it runs through Umami, a cookieless analytics tool — it counts visits and page views without setting a tracking cookie, without a persistent identifier tied to you, and without sharing data with ad networks. There are no third-party ad trackers, retargeting pixels, or cross-site tracking scripts anywhere on this site.

Using the contact form

Submitting the contact form collects: your name, email address, organisation (optional), the kind of project and rough budget you select, and your message. The server also computes a one-way hashed version of your IP address (never the raw address) purely to catch spam and abuse — that hash cannot be reversed back into an IP. If your link carried campaign parameters (UTM tags), those are stored alongside the inquiry so I know which post or channel it came from.

Subscribing to the newsletter

Subscribing stores your email address, a hashed IP (same one-way hashing as above), and which part of the site you signed up from. Signups are double opt-in — nothing is sent until you click the confirmation link in your inbox. Every email includes an unsubscribe link that works instantly.

How this is used

• Responding to whatever you wrote in the contact form.
• Sending the newsletter you explicitly asked for — never anything else.
• Basic anti-abuse and spam filtering on the contact form and newsletter signup.
• Understanding, in aggregate, which pages and posts are actually useful to readers.

What is never done

• Your data is never sold, rented, or shared with data brokers.
• No third-party advertising or retargeting trackers are embedded on this site.
• No cross-site tracking cookies are set for you as a visitor.

How long information is kept

• Contact-form inquiries are automatically deleted after 24 months.
• Newsletter subscriptions are kept until you unsubscribe, at which point the row is retained only to prevent duplicate re-signups — no further emails are sent.
• Hashed IPs are one-way by construction; they are not "kept" in any form that could be reversed to identify you.

Where this runs

• The contact form and newsletter pipeline are backed by a Strapi CMS instance (hosted on Koyeb) with a Postgres database (hosted on Neon).
• Outbound email (confirmation links, inquiry notifications) is sent through Resend.
• The site itself is served from Cloudflare Workers.
• If a spam-protection challenge (Cloudflare Turnstile) is active on the contact form, that check runs through Cloudflare and never sees your message content.
• If error monitoring is active, technical crash reports (not form content) may pass through Sentry to help find and fix bugs.

Your rights

Wherever you are — this isn't limited to any one jurisdiction's residents — you can ask to see what information is held about you, ask for it to be corrected, or ask for it to be deleted outright. Email the address below and expect a response within 30 days.

Children

This site isn't directed at children, and no information is knowingly collected from anyone under 16.

Changes to this policy

This page will be updated if what's collected or how it's used changes in any meaningful way. The "Last updated" date at the bottom reflects the most recent revision.

Questions

For anything not answered above, use the contact form or email the address below directly.