Privacy Policy

Data controller: Arnav Prabhu (individual operator of this personal portfolio site).

Contact: To exercise privacy rights or ask questions about this policy, reach out via the Contact section on the homepage (LinkedIn or GitHub).

This policy applies to visitors who access this website. We do not operate user accounts, checkout, newsletters, or contact forms that collect personal information on this site. External links (for example, LinkedIn or GitHub) are governed by those services' own policies.

We designed this site to collect only limited, aggregated usage information to understand how the portfolio is used. We do not intentionally collect your name, email address, postal address, phone number, government ID, payment details, precise geolocation, browsing history across other sites, or other profile information through this website.

Through privacy-oriented web analytics (provided by our hosting platform, Vercel Web Analytics), we receive only:

• Visitor counts — aggregated numbers of visits and page views, not individualized profiles for advertising.
• Operating system — general device/OS category (for example, Windows, macOS, iOS, Android) to understand technical compatibility.
• Country — country or region inferred from network connection (for example, via IP geolocation at country level) to understand geographic reach.

Our analytics provider may process technical data (such as IP address or browser user agent) temporarily to derive the metrics above; we do not use that data to identify you by name or to build marketing profiles.

• We do not sell or share personal information for cross-context behavioral advertising.
• We do not use advertising or social-media tracking pixels on this site.
• We do not knowingly collect personal information from children under 13 (see COPPA section below).
• We do not require you to create an account to browse this site.

We use the limited metrics above solely to:

• Measure overall traffic and interest in the portfolio;
• Maintain and improve site reliability and performance; and
• Understand broad geographic and platform distribution of visitors.

Legal bases (EEA/UK): Where GDPR or UK GDPR applies, we rely on legitimate interests (Article 6(1)(f)) in operating and securing a low-risk personal portfolio with minimal analytics, balanced against your rights. Where local law requires consent for non-essential analytics, you may disable analytics in your browser or contact us to discuss opt-out.

This site does not set first-party marketing cookies. Our hosting and analytics provider may use strictly necessary or analytics-related technologies to deliver the service and produce aggregated statistics. Because we do not run advertising or third-party marketing tags, we do not use non-essential cookies for ad targeting.

You can limit cookies through your browser settings. Blocking all cookies may affect how some features load.

We use Vercel, Inc. to host this website and provide Web Analytics. Vercel may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms under GDPR).

We do not disclose your information to other third parties except: (a) as needed to operate the site through our processor; (b) if required by law; or (c) to protect rights, safety, or security.

Aggregated analytics are retained according to our processor's retention schedule (typically on the order of months, not indefinitely). We do not maintain a separate database of identifiable visitors on this site.

We use industry-standard hosting and HTTPS. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability. You may lodge a complaint with your local supervisory authority.

To make a request, contact us via the Contact section. We will respond within timeframes required by applicable law (often within one month under GDPR).

If you are a California resident, you may have rights to know, access, delete, and correct personal information, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined under California law.

In the preceding 12 months, the categories of personal information we collect are limited to internet or other electronic network activity information (aggregated visit metrics, OS category, and country-level location) for the business purposes described above.

Many small personal sites are not subject to the CCPA/CPRA business thresholds (for example, annual revenue, volume of California consumers, or revenue from selling data). We provide these disclosures voluntarily for transparency. To exercise rights, contact us via Contact.

We do not discriminate against you for exercising privacy rights.

This website is a general-audience professional portfolio and is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child under 13 has provided personal information to us, contact us promptly via Contact. We will take steps to delete such information where required.

If you are in Japan, South Korea, Singapore, China, India, or other jurisdictions with personal-data laws, you may have rights to notice, access, correction, deletion, withdrawal of consent, or restriction of processing, subject to local law.

• Japan (APPI): We specify purposes of use in this policy and limit collection to what is described above.
• South Korea (PIPA): We collect minimal data for stated purposes and honor requests to access or delete where applicable.
• Singapore (PDPA): We collect data only with appropriate notice and for reasonable purposes aligned with this policy.

For cross-border transfers from these regions, we rely on contractual and technical safeguards through our hosting provider where required.

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Material changes will be posted on this page.

Questions about this Privacy Policy or your data: use the Contact links on the homepage.