Privacy Policy

Who we are

This website is run by [HutiyaBanao], based in India ("we", "us"). We decide how your personal data is used, which makes us the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023.

For anything about your data, including complaints, email privacy@hutiyabanao.online. We act as our own Grievance Officer.

What we collect

When you ask to be notified when the gate opens:

• your email address
• the page you signed up from
• the date and time you agreed to receive updates
• a random code that powers your personal unsubscribe link

When you send feedback:

• your message and, if you choose, a star rating
• your email address, only if you give it so we can reply
• the page you were on when you sent it

When you visit any page, our server automatically records basic technical details: your IP address, browser type, the page requested and the time. This is standard for every website and is used only to keep the site running and secure. Your IP address is also checked briefly, in memory, to stop spam (for example, limiting how many times a form can be sent in 15 minutes). It is not saved with your email or feedback.

We do not collect passwords, payment details, your location, contacts or any sensitive personal data. There are no user accounts yet.

Why we use it

• To email you when the gate opens and, occasionally, about new challenges. We only do this because you asked, and you can withdraw that consent at any time.
• To read your feedback, improve the site and the games, and reply if you asked us to.
• To keep the site secure: blocking spam, bots and attacks, and fixing problems.
• To meet legal obligations, if a law requires it.

We never sell your personal data, and we don't use it for advertising.

Cookies and tracking

This website does not use cookies, analytics, advertising trackers or social media pixels.

It saves one small setting in your browser: whether you turned the music on or off, so the site remembers your choice next time. This stays on your device and is never sent to us.

To display our fonts, your browser downloads them from Google Fonts, which means Google receives your IP address and browser details when you visit. Google's use of that data is covered by Google's own privacy policy.

Who we share it with

We share personal data only with the services that run the website for us, and only what each one needs:

• Amazon Web Services (AWS): hosts the website and its server.
• MongoDB Atlas: stores email sign-ups and feedback in an encrypted database.
• Google Fonts: provides the fonts, as described above.
• Zoho: our email provider, used when you write to us or we reply.
• An email-sending service: when we start sending updates, a service such as Brevo, Mailchimp or Resend will deliver them. We'll update this policy to name it.

These providers process data on our behalf and under their own security and privacy commitments. We may also disclose data if the law requires it, for example to comply with a valid order from a court or government authority.

Where your data is stored

Our providers may store and process data on servers outside India. Transfers outside India are allowed under Indian law, except to any country the Government of India restricts; we will follow any such restriction.

How long we keep it

• Email sign-ups: until you unsubscribe. After that we keep only your email address and the date you unsubscribed, so we never email you again by mistake. Ask us and we'll delete even that.
• Feedback: up to 24 months, then deleted. A reply email address is deleted once the conversation is over.
• Server logs: about 14 days, then deleted automatically.

How we protect it

The site only works over an encrypted connection (HTTPS). The database is encrypted and protected by a strong password and network restrictions, and only we have access to it. Forms are checked carefully before anything is saved.

No system is perfectly secure. If a breach ever affects your personal data, we will inform you and the Data Protection Board of India as the law requires.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can:

• withdraw your consent at any time: use the unsubscribe link in any email, or write to us
• ask what personal data we hold about you and how we use it
• ask us to correct, complete or update it
• ask us to delete it
• name someone to exercise these rights for you if you die or become unable to
• complain to us about how we've handled your data

To use any of these rights, email privacy@hutiyabanao.online from the address concerned, so we can confirm it's you. We'll respond as soon as possible and within the time the law requires. If you're not satisfied with our answer, you can complain to the Data Protection Board of India.

Children

You must be 18 or older to sign up for updates or send feedback. We don't knowingly collect personal data from anyone under 18. If you believe a child has given us their details, email us and we'll delete them.

Changes to this policy

When we change how we handle personal data, for example when user accounts or a newsletter service arrive, we'll update this page and the date at the top. If a change is significant, we'll also tell subscribers by email before it takes effect.

Contact

Questions, requests or complaints: privacy@hutiyabanao.online