This is my personal site. I collect as little as I can, I don't sell or share it for advertising, and there are no third-party trackers. This page lists everything that is collected and why. Last updated October 3, 2026.
When you visit
To see what people read and what breaks, the site keeps its own first-party statistics:
- the pages you view, how long you spend reading, how far you scroll, links and buttons you click, and downloads;
- the site that referred you and any campaign tags in the link;
- device type, browser, operating system, screen size, language and time zone;
- your approximate country, region and city, worked out by the hosting provider from your IP address when the page loads;
- page-speed measurements and any errors the page hits, so I can fix them.
Your IP address itself is not stored. Visits are grouped using two random identifiers kept in your browser's local storage (a visitor id, and a session id that resets after 30 minutes of inactivity). They aren't cookies, aren't shared with anyone, and you can remove them by clearing this site's data in your browser. Known bots are ignored.
When you sign in to comment
Commenting uses Google sign-in. Google shares your name, email address and profile picture with the site. I store those with your account, its approval status, and the comments, likes and reports you make. While you're signed in, your visits are linked to your account. Your email is never shown publicly.
Google user data
Yash Bendersh (this site) uses Google sign-in only so readers can comment. Here is exactly what that involves:
- What is accessed: your Google account's name, email address and profile picture (the basic openid, email and profile scopes). Nothing else: no Gmail, Drive, Contacts or Calendar data from your account.
- How it is used: to create your commenter account, show your name and picture next to your comments, and let me approve or remove accounts. Your email address is used only to identify your account and is never shown publicly or used for marketing.
- How it is stored: in the site's database (Supabase, Singapore), accessible only to the site and its administrator.
- Sharing: Google user data is not sold, not shared with third parties, not used for advertising, and not used to train AI models. It is processed only by the service providers listed below, to run the site.
- Deletion: email me and I'll delete your account and its data. You can also revoke the site's access at any time from your Google Account (Security, Third-party connections).
The site's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Separately, the site's own Google Drive (not yours) stores the images shown on these pages. That is the site owner's account and involves no visitor data.
When you subscribe to the newsletter
I store your email address, where you subscribed and when, and a record of the emails sent to you with their delivery status (for example delivered or bounced). Every email has an unsubscribe link, and you can also reply to any email to be removed.
Cookies
Visitors get no cookies. If you sign in, the sign-in service sets cookies that keep you logged in; they're needed for commenting and are removed when you sign out. Some articles embed content from other sites (videos, code playgrounds, 3D models); those load from their providers and follow their own privacy policies.
Who processes it
- Vercel hosts the site and serves every request.
- Supabase runs the database and the sign-in service (servers in Singapore).
- Google provides sign-in, and Google Drive stores the images on the site. Images are delivered through this site, so your browser doesn't contact Google to load them.
- Resend delivers newsletter emails.
How long it's kept, and your choices
Data is kept until it's no longer useful or until you ask me to remove it. You can ask to see what I hold about you, to correct it, or to delete it, including your account, comments and newsletter subscription. Email yashbendresh2266@gmail.com and I'll reply within 30 days.
Security
The site is served only over HTTPS. The database isn't reachable from the internet except through the site, and only I can open the admin area.
Children
The site isn't aimed at children under 13, and signing in requires a Google account.
Changes
If this changes, I'll update this page and the date at the top. Questions go to yashbendresh2266@gmail.com.