Last updated: November 2026
This privacy policy explains what personal data is processed when you visit CritPixel, why, how long it is kept, and what rights you have. CritPixel is run from India. This policy is written with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025 in mind. Because visitors from the European Union, the United Kingdom and Switzerland are also protected by the General Data Protection Regulation (GDPR), it covers their rights too.
1. Who is responsible
The person responsible for your personal data (the “data fiduciary” under Indian law, or “controller” under the GDPR) is:
Ankita
Surat, Gujarat, India
Email: [email protected]
Contact for privacy questions and grievances: Ankita, [email protected]. You can use this contact for any question about your personal data, to exercise your rights, or to make a complaint.
2. What we collect and why
| Data | When | Why | Basis |
|---|---|---|---|
| IP address, date and time, page requested, browser and device type (server log files) | Every visit | To deliver the website and keep it secure | Legitimate use for a working, secure website (DPDP Act s. 7); legitimate interests (GDPR Art. 6(1)(f)) |
| Cookies and similar identifiers for advertising | Only after you agree, where consent is required | To show and measure ads, and personalise them if you allow it | Your consent (DPDP Act s. 6; GDPR Art. 6(1)(a)) |
| Name, email, optional website, comment text, IP address and time | When you post a comment | To show your comment and handle abuse | Your consent when you submit the comment; legitimate interests (GDPR Art. 6(1)(f)) |
| Email address and message | When you email us | To answer you | Your consent; GDPR Art. 6(1)(b) or (f) |
We do not sell your personal data. We do not ask for sensitive data such as health, financial or ID information.
3. Hosting and server log files
This website is hosted by Hostinger, UAB (Švitrigailos str. 34, LT-03230 Vilnius, Lithuania), on a server in India; its backups are stored in Singapore. Its servers record the technical information listed above in log files. Log files are deleted automatically after the short period set by the hosting company (usually 7 to 30 days), unless they are needed longer to investigate a security incident. The hosting company processes this data only on our behalf.
Cloudflare (security and faster loading): visits to this website pass through Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare delivers the pages, protects the site against attacks and spam bots, and keeps copies of images and files so they load faster. To do this it processes your IP address and the technical request data listed above. It acts only on our instructions and keeps this data for a short time. Cloudflare may process data in the USA and other countries; it is certified under the EU-U.S. Data Privacy Framework. Basis: legitimate use for a working, secure website (DPDP Act s. 7); legitimate interests (GDPR Art. 6(1)(f)). See Cloudflare’s privacy policy.
4. Cookies and consent
Cookies are small text files stored on your device.
Needed for the site to work: if you leave a comment and tick “Save my name, email and website in this browser”, your browser stores these details in cookies so you don’t have to type them again. Site administrators also receive login cookies. Visitors who don’t comment or log in receive none of these cookies.
Security: Cloudflare may set a short-lived security cookie (such as “__cf_bm”, kept for 30 minutes, or “cf_clearance” after a security check) to tell real visitors from harmful bots. These cookies are strictly necessary to protect the website, are not used for advertising or tracking, and don’t need consent.
Advertising: where the law requires it (for example for visitors in the EU, the UK and Switzerland), a consent banner asks for your choice before advertising cookies are used. The banner is Google’s consent tool, certified under the IAB Transparency & Consent Framework. You can change or withdraw your choice at any time with the “Privacy and cookie settings” button on this website, as easily as you gave it. Withdrawing consent does not affect processing that happened before.
5. Google AdSense (advertising)
This website shows ads from Google AdSense, provided by Google LLC (and, for visitors in the EU and UK, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
With your consent where required, Google and its partners use cookies and similar technologies to show ads, measure them and, if you allow it, personalise them based on your interests. Data such as your IP address, device information, the pages you visit and your interactions with ads may be processed. Without consent for personalised ads, Google may still show non-personalised ads that use limited data, for example to prevent fraud.
Google may process data in the USA and other countries. For EU visitors, Google LLC is certified under the EU-U.S. Data Privacy Framework.
More information: how Google uses information from sites that use its services, Google’s privacy policy and manage personalised ads.
6. Comments
Comments and the related data are kept until you ask us to delete them or the comment is removed. Your email address is never published. Comments may be checked before they appear.
7. Email
We keep your emails only as long as needed to answer you, and then delete them unless the law requires us to keep them.
8. Fonts and profile pictures
Fonts are loaded from our own server; no connection is made to Google Fonts or other font services. We do not load profile pictures from third-party services such as Gravatar.
9. How long we keep data
We keep personal data only as long as it is needed for the purposes above, or as long as the law requires. When it is no longer needed, we delete it.
10. Your rights
Under India’s DPDP Act, you have the right to:
- get a summary of the personal data we process about you and how we process it
- have your data corrected, completed, updated or erased
- withdraw your consent at any time, as easily as you gave it
- have your grievances addressed
- nominate another person to exercise your rights if you die or become unable to do so
If you are in the EU, the UK or Switzerland, you also have the GDPR rights to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and to withdraw consent (Art. 7(3) GDPR).
To use any of these rights, email the contact in section 1. We will respond as quickly as possible and within the time the law allows (under the DPDP Rules, within 90 days at the latest).
11. Complaints
Please contact us first (section 1); we will try to solve the problem quickly. If you are not satisfied:
- In India, you can complain to the Data Protection Board of India after using our grievance process.
- In the EU, UK or Switzerland, you can complain to the data protection authority in the country where you live.
12. Children
This website is written for a general audience and is not designed for children. We do not knowingly collect personal data from children. If you are under 18, please ask a parent or guardian before posting a comment or contacting us.
13. Security
This website uses an encrypted connection (https). We keep the software up to date and use strong passwords and two-factor authentication for administration.
14. Changes
We may update this privacy policy when the website or the law changes. The current version is always available on this page, with the date at the top.