← Back to Home

Privacy Policy

Effective and last updated: June 10, 2026

1. Scope and Controller

This Privacy Notice explains how this portfolio website collects, uses, stores, and discloses information. The site operator and data controller is Shivansh Malviya. Privacy questions and requests may be sent to ping@shivanshmalviya.tech.

This notice applies to the public portfolio website, its pages, contact and feedback forms, analytics integrations, device-identification integrations, technical logs, and related operational records. It does not govern third-party websites reached through external links.

2. Tools and Service Providers Used

The site currently uses the following third-party services:

  • Vercel for hosting, deployment, edge delivery, request logs, and Vercel Web Analytics / Insights.
  • PostHog for product analytics, page-view tracking, autocapture of interactions, visitor profiles, and event diagnostics.
  • Fingerprint Pro for browser/device-derived visitor identification and repeat-visit recognition.
  • Formspree for processing contact and site-feedback form submissions.
  • Google Fonts and jsDelivr / KaTeX for fonts and mathematical-notation assets.
  • GitHub and LinkedIn when visitors open external profile or repository links.

These providers may process data under their own privacy notices and terms. This site does not sell or rent visitor information and does not use analytics data for targeted advertising or data brokerage.

3. Information That May Be Collected

Any or all activity on the site may generate analytics or technical records. Depending on browser settings, provider behaviour, network configuration, and visitor actions, the site may collect or generate:

  • Technical information: IP-derived network information, request metadata, browser and device characteristics, operating system, screen and viewport details, referrer, language, approximate location, performance data, errors, and security logs.
  • Usage information: page views, sessions, navigation paths, button/link clicks, form focus and input-start events, theme-toggle events, project-page visits, and other interaction events captured through analytics.
  • Identifiers: cookies, local-storage values, session identifiers, analytics identifiers, PostHog distinct IDs, Fingerprint Pro visitor IDs, and device-derived identifiers used to distinguish browsers or devices across visits.
  • Submitted information: name, email address, company or handle if provided, message content, feedback text, and any other information voluntarily submitted through a form or email.

4. Analytics, Autocapture, and Visitor Identification

Vercel Web Analytics / Insights may collect anonymous or aggregated traffic and performance data, including page views, referrers, browser, operating-system, geographic, and performance information. Vercel states that its Web Analytics does not use cookies and uses an incoming-request hash to identify visitors for a limited period.

PostHog is configured on this site with page-view tracking, autocapture, and person profiles. This means PostHog may record interactions such as clicks, page transitions, form engagement events, theme-toggle events, project-page visits, and other behavioural events. PostHog may assign or receive a distinct visitor identifier and associate events with that identifier.

Fingerprint Pro is configured to identify browsers or devices by collecting browser signals and returning a visitor ID. The site currently syncs that Fingerprint visitor ID with PostHog so repeat visits can be associated with the same analytics profile. This is used for analytics integrity, debugging, abuse detection, and understanding site usage. Visitors should not assume that browsing this site is anonymous.

5. Forms and Communications

Contact and site-feedback forms are processed through Formspree. When a visitor submits a form, the submitted fields, technical metadata, and provider logs may be transmitted to and stored by Formspree and may also generate analytics events on this site.

Do not submit passwords, government identifiers, financial information, health information, confidential third-party information, client secrets, source-code secrets, private keys, unpublished research, or other sensitive information through site forms. Submitted information is used only to respond, maintain necessary correspondence records, prevent abuse, and protect legal interests.

6. Purposes of Processing

Technical, identifier, usage, and submitted information may be used to operate the site, measure traffic, debug errors, understand what content is useful, detect abuse, secure the site, respond to messages, improve design and accessibility, maintain records, and comply with legal obligations.

The site operator does not intentionally repurpose site activity data for unrelated marketing, targeted advertising, sale, rental, or commercial data brokerage.

7. Legal Bases and Consent

Where applicable law requires a legal basis, processing may rely on legitimate interests, consent, steps taken at a visitor's request, performance of an agreement, compliance with legal obligations, or another basis permitted by law. Legitimate interests may include site security, fraud prevention, audience measurement, debugging, service improvement, and responding to professional inquiries.

Where consent is legally required, visitors may withdraw it prospectively. Withdrawal does not affect processing already performed before withdrawal. Browser privacy settings, ad blockers, script blockers, and provider-specific opt-outs may reduce analytics or device identification, but may not prevent all server-side or provider logs.

8. Cookies, Local Storage, and Similar Technologies

The site and its providers may use cookies, local storage, session storage, device-identification methods, scripts, request logs, and similar technologies. The theme toggle stores a local preference in the visitor's browser. Analytics and identification providers may create or receive identifiers to distinguish sessions, browsers, or devices.

Blocking scripts or storage may affect analytics, theme persistence, form functionality, and other behaviour, but should not prevent ordinary reading of the portfolio.

9. Disclosure and Sharing

Information may be disclosed to service providers and other parties reasonably necessary to operate, secure, analyze, maintain, and improve the site; process visitor requests; comply with law; respond to legal process; or establish and defend legal rights.

Service providers may receive information solely to perform their relevant services, subject to their own legal obligations and terms. The site operator does not sell or rent visitor information.

10. Retention

Information may be retained for as long as reasonably necessary for the purposes described in this notice, to maintain security and records, to comply with law, or to establish or defend legal claims. Analytics retention periods may differ by provider configuration. Form submissions may be retained for professional correspondence and abuse-prevention purposes unless deletion is requested and retention is no longer necessary.

Information may remain in backups, logs, aggregated records, provider systems, or legal records after deletion from active use.

11. International Processing

The site and its providers may process information in India, the United States, the European Economic Area, the Asia-Pacific region, and other jurisdictions. Data-protection laws and government-access rules may differ from those in a visitor's location. Where legally required, appropriate transfer mechanisms or safeguards may be used by the relevant provider or controller.

12. Visitor Choices and Rights

Visitors may use browser controls, script blockers, privacy extensions, and provider opt-out mechanisms to limit some collection. Visitors may also choose not to use forms and instead contact the site operator directly by email.

Depending on applicable law, visitors may have rights to request access, correction, deletion, restriction, portability, withdrawal of consent, objection to processing, or information about recipients. Visitors may also have the right to complain to a competent regulator. Requests may be sent to ping@shivanshmalviya.tech. Reasonable information may be requested to verify identity and authority.

13. Security and No Guarantee of Anonymity

Reasonable measures may be used to protect information, but no website, transmission, provider, or storage system can be guaranteed secure, private, uninterrupted, or error-free. Device identifiers, IP addresses, submitted information, and combined datasets may permit a visitor or organization to be recognized. Visitors should not assume that browsing is anonymous.

14. Children

This site is intended for a general professional and research audience and is not directed to children. Sensitive personal data about children should not be submitted. If such information is believed to have been submitted, contact the site operator to request review and deletion where appropriate.

15. External Links and Third-Party Responsibility

External links may lead to services such as GitHub, LinkedIn, publications, videos, or conference pages. Those services independently determine their processing practices. The site operator does not control and is not responsible for third-party sites, provider policies, provider security, or provider actions, except to the extent responsibility cannot be excluded under applicable law.

16. Changes to This Notice

This notice may be updated to reflect changes in tools, vendors, practices, law, or site functionality. Material changes to the categories of processing or providers should be reflected in this notice. Changes become effective when posted, unless applicable law requires additional notice or consent.

17. Legal Effect and Contact

This notice is intended to provide transparency and does not create contractual rights beyond those provided by applicable law. Nothing in this notice waives rights or obligations that cannot legally be waived, excludes liability that cannot legally be excluded, or guarantees that every law applies to the site operator.

For privacy questions, requests, or complaints, contact ping@shivanshmalviya.tech.