Privacy Policy

Last updated: August 2026

TL;DR

I take privacy seriously. This site does not use cookies, does not store IP addresses, does not fingerprint browsers, and does not track you across sites. All analytics are anonymous.

Who I am

This website (milinds.dev) is the personal portfolio of Milind Sonawane, based in Mumbai, India. You can reach me at [email protected].

What data is collected

Anonymous analytics

I use a custom-built analytics system to understand how many people visit my portfolio and which pages they view. This helps me improve the site.

  • Random visitor ID— A 32-character random string stored in your browser's localStorage. Not linked to any personal identity.
  • Page views — Which pages were visited and when.
  • Browser metadata— Browser name, operating system, and device type (e.g. "Chrome on Windows"). Parsed from your User-Agent string and stored anonymously.
  • Country— Detected via a one-time GeoIP lookup (ipapi.co) and/or Cloudflare's edge network headers (CF-IPCountry). Your IP address is transmitted to ipapi.co solely for country-level geolocation, and is stored temporarily (max 90 days) in an encrypted cache (Upstash Redis) only to reconcile country data if detection fails. It is not otherwise logged or persisted.

What is NOT collected: Cookies, browser fingerprints, personal identities, cross-site tracking data, or any personally identifiable information (PII).

Contact form

When you submit the contact form, the following information is processed:

  • Your name, email address, and message
  • Inquiry type and budget preference (optional)
  • Submission metadata: IP address, country, city, browser type, and referring page — used for spam prevention

This data is sent via Resend (email delivery service) to [email protected] and stored in Gmail. It is not stored in any database.

Third-party services

  • Cloudflare — Hosting, CDN, and DDoS protection. Cloudflare processes your IP address at their edge network to serve content and provide security. Cloudflare may set a strictly necessary __cf_bm cookie for bot detection. See Cloudflare's privacy policy.
  • Cloudflare Turnstile — Spam protection on the contact form. May set a necessary security cookie. See Cloudflare's privacy policy.
  • Supabase — Database hosting for anonymous analytics. Data is stored in PostgreSQL with Row-Level Security enabled. See Supabase's privacy policy.
  • ipapi.co — One-time GeoIP lookup to determine your country from your IP address for anonymous analytics. No personally identifiable data is shared. See ipapi.co's privacy policy.
  • Resend — Email delivery for contact form submissions. See Resend's privacy policy.

Data retention

  • Analytics data — Retained indefinitely in aggregate form. Individual visitor IDs are random and cannot be linked to any person.
  • Contact form submissions — Stored in email (Gmail) for the duration of correspondence, then archived.

Your rights

Depending on your jurisdiction, you may have rights under GDPR (EU/UK), CCPA/CPRA (California), PIPEDA (Canada), or the Australian Privacy Act. These may include the right to access, correct, or delete your data.

Since I do not collect personally identifiable information through analytics, and contact form data is processed only with your consent, exercising these rights is straightforward — email me at [email protected].

Children's privacy

This website is not directed at children under 13, and I do not knowingly collect data from children.

Changes to this policy

This policy may be updated periodically. The "Last updated" date at the top reflects the most recent changes.

Contact

For privacy-related inquiries: [email protected]

Resume