PRIVACY POLICY

This is a personal site. I do not run ads, I do not sell data, I do not have a marketing automation platform behind the scenes profiling you. The only personal information that touches this site is what you choose to send via the contact form, and the only thing I do with it is read it and reply to you.

If you want the longer version, the rest of this page covers exactly what is collected, where it goes, and how to remove it.

This site uses two analytics tools. The first is Ahrefs Web Analytics, a cookieless, privacy-focused tool that sets no cookies, collects no personal data, does not fingerprint visitors, and records only anonymised, aggregate page views, traffic sources, and country-level signals. The second is Google Analytics 4, which I use to understand which writing is genuinely useful. Google Analytics is gated behind consent: it loads in a denied state by default (Google Consent Mode v2) and sets no analytics cookies and stores nothing unless you click Accept on the cookie banner. If you decline, or simply ignore the banner, Google Analytics stays off. No Mixpanel, no Segment, no Hotjar, and no advertising cookies of any kind.

You can change your choice at any time using the Cookie settings link in the site footer. The only other cookies or LocalStorage entries are functional ones you control: your theme preference (default versus 1995 mode), your language preference if you switch locales, and a record of your cookie choice so the banner does not reappear on every visit. These stay in your browser, are never sent to a server, and you can clear them from your browser settings whenever you like.

The hosting provider, Netlify, may keep aggregated edge-server access logs for security and abuse-detection purposes. Those logs are out of my reach and rotate on Netlify's schedule. They contain IP addresses and request paths, no personal information.

If you fill in the contact form on /contact/, the message comes to me via the form provider (Netlify). The data sent is the name, email address, and message you typed. Nothing else.

I keep the email until I have replied and a reasonable follow-up window has passed (typically 6 months). After that I delete the thread unless we have an active project.

If you want me to delete a message earlier, email me asking for it and I will. No forms to fill, no support ticket, just a reply.

Some pages embed content from other sites: YouTube videos on /wplegends/, Calendly links to my booking page on service pages, X / Twitter and LinkedIn links in the footer.

When you click an external link or play a YouTube embed, the destination site sees you and may set its own cookies under its own privacy policy. I do not control what they collect. If you want to read the source policies: Google / YouTube, LinkedIn, X / Twitter, Calendly.

The blog posts, guides, and other published content on this site are stored in Supabase, my hosted Postgres provider. Supabase is the database, not the visitor analytics layer. It does not see who you are when you read a post.

The content stored in Supabase is the same content you see rendered on the page. There is no shadow database of visitor data behind the scenes.

I explicitly allow GPTBot (OpenAI), ClaudeBot (Anthropic), PerplexityBot, and Google-Extended to crawl this site so that the writing here can be cited in AI search surfaces. Their crawler activity is request-shaped, not visitor-shaped, and does not involve any of your personal data.

If you are reading this because an AI tool surfaced one of my posts, the underlying model has my publicly published content as training context. It does not have anything you submitted via the contact form or anywhere else.

Under UK GDPR and equivalent regimes, you have the right to:

• Ask what personal data I hold about you
• Ask me to delete it
• Ask me to correct anything that is wrong
• Object to specific uses
• Complain to the UK Information Commissioner's Office (ico.org.uk) if you think I have mishandled it

To exercise any of those rights, contact me through the contact form. I will reply within a reasonable window, usually a few working days.

The data controller for this site is:

Gautam Khorana
Office 77, 22 Notting Hill Gate
London W11 3JE
United Kingdom
Contact form

If you reached this page from a Seahawk Media engagement and your question relates to that work specifically, the Seahawk privacy notice covers it: seahawkmedia.com/legal/privacy-policy.

If anything material changes (a new analytics tool, a new third-party embed, a new data flow), I will update this page and bump the date at the top. The git history of this file is public on GitHub, so previous versions are auditable.