Privacy Policy

This site, pranaysarkar.com, is run by Pranay Kumar Sarkar, an independent UI/UX designer based in India (“I”, “me”). I decide what personal data is collected and why, which makes me the data fiduciary (or data controller) for it. This policy covers this site only, not other sites it links to. Questions, requests and complaints go to pranaysarkaruiux@gmail.com.

Everyone who visits

• Usage statistics through Vercel Web Analytics: pages viewed, the site that referred you, and your country, device type, operating system and browser. It sets no cookies and is designed so that I can’t identify you or follow you across other sites.
• Technical logs kept by my hosting provider, Vercel, such as IP address, browser and time of each request, used to deliver the site and protect it from abuse.

If you unlock a protected case study

• The email address you enter to receive a one-time code.
• Which case study you opened, when, the chapters you reached, how long the page was open and visible, your browser’s user agent, and the page that linked you there.
• If you use a password instead of an email, the same reading activity without an email address. Failed password attempts are recorded against a one-way hash of your IP address, so passwords can’t be guessed.

If you email me, I receive your message and email address in my inbox.

I don’t ask for sensitive personal data or payment details, and the site carries no advertising. Please don’t send me sensitive personal data.

• To send you a code and give you access to work covered by a non-disclosure agreement.
• To keep a record of who has viewed confidential work, so I can protect it and the clients it belongs to.
• To understand which work interests people, improve the portfolio, and follow up with you professionally.
• To keep the site secure, prevent misuse, and meet legal obligations.

I process data from protected case studies on the basis of your consent, which you give when you request a code or use a password. Anonymous statistics and security logs are processed for the legitimate purposes of running and protecting the site. You can withdraw consent at any time (see “Your rights”); this doesn’t affect anything done before you withdrew it, but you’ll lose access to protected case studies.

I won’t use your data for any purpose that isn’t compatible with these without asking you first.

I never sell or rent your data, or share it for advertising. It is processed only by services that run the site for me:

• Vercel: hosting and usage statistics.
• Supabase: sign-in codes and the record of case study visits.
• Resend: delivering the code email.
• Google: a private Google Sheet holding a backup of case study visit records, and my email inbox.

These providers may store and process data outside India, including in the United States and the European Union, under their own security commitments, and may keep their own operational logs for limited periods. I may also disclose data where the law requires it, or to establish, exercise or defend legal claims, including a breach of a confidentiality obligation.

The site sets no advertising or tracking cookies. When you unlock a case study, your browser stores a sign-in token so you can reload the page without a new code. Access lasts one hour from your code; after that the token is cleared and you’ll need a new code. You can also remove it at any time by clearing this site’s data in your browser.

• Case study visit records and sign-in accounts are deleted automatically from the site’s database 45 days after the visit (sign-in accounts, 45 days after their last use).
• Before deletion, visit records are copied to my private backup sheet. I keep that copy only as long as I need it for the purposes above, such as following up with you or protecting confidential work, and delete it sooner if you ask.
• Failed password attempts are deleted after 24 hours.
• Emails you send me are kept in my inbox for as long as our conversation is relevant.

Under India’s Digital Personal Data Protection Act, 2023, and, where they apply to you, laws such as the EU and UK GDPR, you can:

• get a summary of the personal data I hold about you and who it has been shared with;
• have inaccurate data corrected or completed;
• have your data erased, including from the backup sheet;
• withdraw your consent;
• nominate someone to exercise these rights for you in case of death or incapacity; and
• where the GDPR applies, object to or restrict processing and receive your data in a portable format.

Email pranaysarkaruiux@gmail.com from the address in question, so I can confirm the request is yours. I’ll respond within 30 days. If you’re unhappy with my response, you can complain to the Data Protection Board of India or your local data protection authority.

Protected content and visitor records are stored privately and are reachable only through checks on the server, and I limit who can access them. No method of storing or sending data is completely secure, so I can’t guarantee absolute security. If a breach affects your personal data, I’ll notify you and the authorities as the law requires.

This site is meant for professionals. Protected case studies are only for people aged 18 or over; if you’re under 18, please don’t request a code. If I learn that I hold data from someone under 18, I’ll delete it.

I may update this policy as the site or the law changes. The date at the top shows the current version. If a change materially affects how I use data you’ve already given me, I’ll ask for your consent again where the law requires it.