Privacy Policy

1. Scope and operator

This Privacy Policy applies to the public website at www.sudiipghosh.com. The website is operated by Sudiip Ghosh as a professional portfolio and contact channel.

Questions about this notice or the handling of a contact enquiry may be sent to sg@sudiipghosh.com.

2. Information collected

Information you provide

The contact form may collect:

• your name;
• business email address;
• company or organization, when provided;
• enquiry category; and
• the business challenge, intended outcome or other message you submit.

Please do not submit passwords, payment information, confidential client data, sensitive personal information or material you are not authorized to share.

Limited technical and preference data

The website may process an IP address, request time, origin information and basic server-log data to validate submissions, apply rate limits, diagnose failures and protect the contact endpoint. A short-lived session cookie is used for contact-form security and form feedback. The sidebar preference may be stored locally in your browser so the navigation can reopen in your chosen state.

3. First-party website analytics

The website uses a first-party analytics collector configured by the website operator. Analytics records are sent to an operator-controlled Google Firebase project and stored in Cloud Firestore. This is used to understand use of this website, not to build advertising profiles.

Information recorded

The collector may record:

• the page path, page title and website section viewed;
• the event type and time, such as a session start, page view, engagement interval, page exit or outbound-link click;
• a pseudonymous visitor ID, a session ID, page number within the session and whether the session or landing page is new;
• referrer and traffic-source information, including UTM source, medium, campaign, term and content values when present;
• engagement time, time on the page and maximum scroll depth;
• for an outbound click, the destination link and domain; and
• basic device and browser context: device type, user-agent string, browser language, viewport and screen size, connection type, colour-scheme preference and time zone. A country field is present but may contain only “Unknown” when no location is available.

The collector does not record names, email addresses, contact-form field values or the contents of messages submitted through the contact form. The collector payload does not add a raw IP-address field, although Google or the hosting provider may receive an IP address and other connection data when delivering their services.

Browser identifiers

A randomly generated visitor identifier is stored in local storage under sg_vid and remains there until the browser’s site data is cleared. A separate sg_session local-storage record contains the session identifier, visitor identifier, page count and session timing. A new analytics session is created after approximately 30 minutes of inactivity.

Analytics is not collected on the website’s administrative pages.

4. How information is used

Information submitted through the website may be used to:

• review and respond to your enquiry;
• continue relevant professional correspondence;
• route the enquiry to the appropriate mailbox;
• prevent spam, fraud, repeated automated submissions and security abuse;
• troubleshoot contact-form delivery; and
• meet applicable legal, record-keeping or dispute-resolution requirements.

Submitting an enquiry does not automatically subscribe you to marketing communications.

Analytics information is used to measure sessions and page views, understand traffic sources and visitor journeys, assess content engagement, identify technical problems and improve website content and navigation. The operator may disable tracking in an owner or test browser so administrative activity does not distort these measurements.

5. Sharing and service providers

Contact information may be processed by the website hosting provider and email provider only as needed to deliver, secure and store the enquiry. Information may also be disclosed when reasonably necessary to comply with applicable law, protect rights or safety, investigate abuse or respond to a valid legal request.

Analytics information is processed by Google through Firebase and Cloud Firestore as a service provider to the website operator. Google may process service and connection data on infrastructure in different countries in accordance with its Firebase terms and privacy documentation.

The website does not sell or rent contact-form or analytics information.

6. Storage, retention and security

Reasonable technical and organizational safeguards are used, including encrypted website delivery, server-side validation, anti-spam controls, restricted mail configuration and limited access to enquiry content.

Correspondence is retained only for as long as reasonably needed to respond, maintain relevant professional records, protect the website and meet applicable obligations. No internet transmission or storage system can be guaranteed to be completely secure.

Analytics records are kept in the operator’s Firebase project. No fixed automatic deletion period is currently guaranteed; records may remain until they are manually reviewed or deleted, subject also to Firebase backup and service-retention processes. The operator intends to review retention as the analytics system matures and avoid keeping identifiable or pseudonymous records longer than reasonably necessary.

7. Your choices and requests

You may request information about contact details you submitted, ask for a correction or request deletion where appropriate. Send the request from the relevant email address to sg@sudiipghosh.com with the subject Privacy request.

Reasonable verification may be required before acting on a request. Some information may need to be retained where required for security, legal or legitimate record-keeping purposes.

The analytics collector honors a browser Do Not Track value of 1 and an enabled Global Privacy Control signal. Analytics can also be disabled for a particular browser by setting the website’s local-storage value sg_disable_analytics to 1 and reloading the page. This browser-level option is used for owner and testing activity as well. Clearing browser site data may remove the opt-out, in which case it must be set again. You may contact the operator for help with this choice or to request deletion of analytics records that can reasonably be linked to your visitor identifier.

8. External links and services

The website links to services such as LinkedIn, X, Facebook, WhatsApp and external publications. Those services operate under their own terms and privacy notices. Opening an external link may allow that provider to receive technical information according to its own practices.

This website does not currently use third-party advertising trackers and does not add contact-form content to analytics systems. Firebase is used as the analytics storage and processing service described above.

9. Updates and contact

This notice may be updated when the website, contact process or relevant requirements change. The date at the top identifies the latest published version.