🪷 Privacy Policy

Last updated: 5 August 2026

What This Policy Covers

This Privacy Policy describes how Vidhyamitra (the website at https://vidhyamitra.com) collects, uses, and shares information when you visit the site. By using Vidhyamitra, you agree to this policy.

Reader-Local Privacy Boundary · Bhūmi To Browser

Privacy begins where the reader stands: Goloka/Vraja Rādhā-Krishna → Vaikuṇṭha Lakṣmī-Nārāyaṇa → Mahāviṣṇu/Kāraṇodakaśāyī Viṣṇu → Garbhodakaśāyī Viṣṇu → Brahmā → Kṣīrodaka Paramātmā/Antaryāmī (Kṣīrodakaśāyī Viṣṇu) → Bhūmi → reader's own kṣetra anywhere on Bhūmi → browser/device → network request → server logs/silicon substrate → reader/seer. The privacy boundary follows the reader's own device, jurisdiction, and exact kṣetra.

In practical terms: chart inputs are processed in-request, not stored in an application database; optional chart localStorage stays on the reader's own device; application access logs use registered route templates instead of raw path or query values and are kept in bounded rolling files. Requests still pass through Cloudflare, whose edge processing and retention are governed separately by Cloudflare and the site's configured account settings.

Information We Collect — Minimal by Design

Information You Submit

• Birth-chart data — when you submit your birth-date, time, and place to the calculator or Viśvarūpa-Darśana form: this data is sent as URL parameters, processed live for chart computation, and is not stored in any application database. Personal chart result pages are marked Cache-Control: private, no-store so browsers, shared proxies, and CDN edges are instructed not to store the rendered chart response. Parameters may remain in your browser history and necessarily transit Cloudflare and the origin; Vidhyamitra's application access logger records only the matched route template, method, status, and latency—not the raw path or query values.
• Optional browser localStorage for Viśvarūpa auto-resume — if you explicitly choose "Remember this chart on this device" on the Viśvarūpa-Darśana form, your browser saves a small local copy of date, time, latitude, longitude, timezone, and city label under the key vd_bhakta_chart. This is stored on your device only, is used to prefill/resume future visits, and can be cleared with the "Forget my chart" button on the Viśvarūpa page. If you do not opt in, Vidhyamitra does not write this chart-memory localStorage key.
• Correspondence — if a role-based institutional channel is enabled (see /contact), the message and reply address are retained only as described by that channel's published retention policy.

Information Automatically Collected

• Application server logs — HTTP method, registered route template, response status, and request duration. Raw path segments and query strings are excluded, and Docker bounds these logs to three rolling files of at most 10 MiB each. They are used for operational diagnostics, not individual tracking.
• Cloudflare edge processing and analytics — requests transit Cloudflare for Zero Trust tunnelling, DDoS protection, and traffic delivery. Edge data availability and retention depend on Cloudflare's services, plan, and configured account settings and are not represented as application-server retention. See Cloudflare's privacy policy.
• Google Analytics 4 — optional aggregate page-view and engagement analytics on non-personal public pages. The GA4 script is not requested until you choose “Allow optional services.” When allowed, automatic page views remain disabled and the manual event omits the query string. See Google's privacy policy.
• Google AdSense — optional ad-serving that may use cookies or similar storage. The AdSense script is not requested until you choose “Allow optional services.” Google's advertising controls are available through Google Ads Settings or aboutads.info.

How We Use Information

• To compute and render your chart in real-time (no application database storage)
• To respond to email inquiries
• To operate the website (Cloudflare routing, DDoS protection)
• To understand aggregate usage patterns on non-personal public pages through GA4
• To display contextually-relevant ads via Google AdSense (third-party)
• To diagnose technical issues from server logs (aggregated, not individual)

What We Do NOT Do

• We do NOT sell or rent your personal data. Third-party processing is limited to the disclosed Cloudflare CDN/analytics, Google Analytics 4 aggregate measurement, and Google AdSense ad-serving lanes above.
• We do NOT load GA4 or AdSense on the personal chart result routes named above.
• We do NOT use Facebook Pixel, in-house tracking profiles, accounts, login IDs, or a first-party user-profile database.
• We do NOT require accounts, signup, login, or any persistent identification to use the substrate.
• We do NOT track your chart-submissions across sessions.

Optional Services and Browser Choice

Vidhyamitra's complete first-party reading and computation surface works without optional cookies. Until you explicitly choose “Allow optional services,” the page does not request Google Analytics or Google AdSense. Choosing “Keep optional services off” stores only that preference in your browser and does not reduce portal functionality. You can reopen the choice at any time through “Privacy choices” in the footer. Personal chart-result routes never load either Google service, regardless of the saved choice.

Children's Privacy

Vidhyamitra does not knowingly collect personal information from children under 13. If you are a parent and believe your child submitted information, use the institutional process described at /contact. The role-based mailbox is a required pre-release operational gate.

GDPR / CCPA / India DPDP Rights

If you are a resident of the European Union, California, India, or any jurisdiction with similar data-protection laws, you have rights under your local law including:

• The right to access information we hold about you (note: we hold very little — see above)
• The right to deletion of any email correspondence we retain
• The right to opt out of Google AdSense personalization (via Google's controls)
• The right to lodge a complaint with your local data-protection authority

To exercise these rights, follow the institutional process at /contact. A verified role-based privacy mailbox must be provisioned before release.

Changes to This Policy

This policy may be updated periodically. Material changes will be reflected in the "Last updated" date at the top.

Contact

For privacy questions, see /contact. No personal mailbox is published as the controller contact.

🪷 ॐ शान्तिः 🪷