Privacy policy.
Compliant with India's Digital Personal Data Protection Act, 2023 (DPDP). Plain language.
What we collect
- Your IP address — hashed with a server-side pepper (SHA-256, truncated to 32 chars). The original IP is never stored. We use the hash to rate-limit submissions and to count unique reactions on grievances.
- Your WhatsApp number — only if you opt into the Notify-me feature (Plan 6, coming soon). Stored as a SHA-256 hash for de-duplication + encrypted (AES-GCM) for actually sending the alert. Purged 30 days after your subscription resolves.
- Grievance text — what you publicly post in the Janta Darbar. This is intentionally public.
- Anonymous usage data — via Umami (self-hosted, no cookies, no cross-site tracking). Aggregate page-view counts only.
What we don't collect
- Names, emails, addresses — none of it is asked for.
- Cookies for tracking — we use no advertising or analytics cookies. Cloudflare Turnstile sets one functional cookie to prevent bot abuse; it does not track you across sites.
- Browser fingerprints, GPS, anything beyond what's listed above.
Your rights
- Delete your alerts: a /delete-my-data page is on the way (Plan 6) — you'll enter your WhatsApp number, verify via OTP, and we purge.
- Request your data: email hi@downtimebhavan.in. Since we don't store identifying info beyond the hashes, there's not much to send.
- File a complaint with the Data Protection Board of India if you believe we've violated DPDP.
Retention
- IP hashes: 30 days, then purged.
- Phone numbers: 30 days after subscription resolves (alert fires, you cancel, or you delete).
- Grievance text: retained indefinitely as public content.
- Uptime measurements: retained indefinitely as the public record.
Last updated: 28 May 2026. Material changes will be announced via the homepage banner with at least 7 days' notice.