Privacy Policy

vectorbloom (vectorbloom.cloud) is operated by Sahil Khanna. This policy explains what data we collect when you read the site or subscribe to updates, why, how long we keep it, and how to exercise your rights over it. It's written to meet both the EU/UK GDPR and India's Digital Personal Data Protection Act, 2023 (DPDP Act) — where the two differ, we follow whichever gives you more control.

What we collect

If you just read the site, we don't collect anything that identifies you personally beyond what the analytics tools below describe. Standard server logs (IP address, page requested, timestamp) are kept briefly for security and debugging, not tied to an identity.

If you subscribe to email updates, we collect and store, in a dedicated database record kept for this purpose:

Your email address
Which form you used to subscribe (footer, an article, the homepage, the header, or the archive page) and, where relevant, which article or category you were reading
The version of this policy and consent language in effect when you subscribed
A cryptographically hashed (not reversible) copy of the IP address the request came from, and your browser's user-agent string
Timestamps: when you asked to subscribe, when you confirmed, and when you unsubscribe (if you do)

This is a double opt-in process: asking to subscribe sends you a confirmation email, and nothing further happens — no email is added to any mailing list — unless you click the link in it. That click, together with the record above, is what we keep as demonstrable proof of your consent, as both GDPR and the DPDP Act require.

How we use it

Your email address is used only to send you new posts from this site and, once, a welcome message when you confirm. We do not sell, rent, or trade your email address to anyone. The consent record above is used only to prove, if ever asked, that you actually agreed to receive email from us, and is not used for marketing profiling.

Where it's stored

Subscription and consent records are stored in this site's own WordPress database, on a server we control. Confirmed subscribers' email addresses are also synced to Brevo (a transactional email and mailing-list provider), which actually sends the emails and lets you unsubscribe with one click from any email you receive. Brevo acts as our data processor for this purpose and maintains its own privacy and security standards — see Brevo's privacy policy.

Analytics & site tools

This theme supports the following tools, each independently switched on or off — not all may be active at any given time:

Google Analytics 4 and/or Google Tag Manager — traffic and on-site behavior, using cookies
Google Search Console and Bing Webmaster Tools — search-visibility verification only, no visitor tracking
Microsoft Clarity — session behavior (scroll/click patterns), using cookies
PostHog — product analytics, using cookies

Where any of these are active, they may set their own cookies as described in our Cookie Notice. None of these tools receive your email address or subscription data — that lives only in our own database and in Brevo, as described above.

Your rights

You can, at any time:

Unsubscribe — every email includes a one-click unsubscribe link, and we remove you from active sending immediately.
Ask what we hold — email us (below) and we'll send you the record we have against your address.
Ask us to delete it — we'll delete your subscription and consent record on request, except where we're required to keep a minimal trace (e.g. "this address unsubscribed on this date") to honor a prior opt-out and avoid re-emailing you by mistake.
Correct it — if we hold something inaccurate about you, tell us and we'll fix it.

Under the DPDP Act you also have the right to nominate another individual to exercise these rights on your behalf in the event of death or incapacity — contact us if you'd like to do so.

How long we keep it

An unconfirmed subscription request (you asked, but never clicked the confirmation link) is deleted after 48 hours. A confirmed subscription is kept for as long as you remain subscribed, plus a minimal record after you unsubscribe solely to prevent re-adding you by mistake.

Affiliate links & advertising

Some articles contain affiliate links or paid placements. Clicking one does not give the advertiser or affiliate partner access to any of your data held by us — that relationship, if any, happens directly between you and the advertiser's own site. See our Affiliate & Advertising Disclosure for the full policy.

Children

This site is intended for a business and professional audience and is not directed at children. We don't knowingly collect data from anyone under 18.

Changes to this policy

If we materially change how we handle your data, we'll update the date at the top of this page. Continuing to use the site after a change means you accept the updated policy; for the subscription flow specifically, any change to what we collect will show a fresh consent notice the next time someone subscribes.

Contact

Questions about this policy, or to exercise any of the rights above, email [email protected].