Privacy Policy
Last updated: 28 September 2026
- This is a personal portfolio. It never asks you to type in any information.
- My hosting and security provider, Cloudflare, processes technical data such as your IP address to deliver and protect the site. It may set short-lived security cookies.
- Fonts and code libraries load from other companies' servers, which see your IP address when your browser fetches them.
- If you email me, I receive what you choose to send and use it only to reply.
- I never sell your data or share it for advertising.
01Who I am
This website, bajkamalsingh.me (including www.bajkamalsingh.me, together the "site"), is the personal portfolio of Bajkamal Singh, an individual based in Delhi, India ("I", "me").
For personal data I decide how to handle, I am the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the data controller under the EU and UK General Data Protection Regulation ("GDPR"). This policy is written with the DPDP Act and the DPDP Rules, 2025, the Information Technology Act, 2000, and the GDPR in mind. My guiding principle is simple: collect as little as possible.
02Information you send me
The site has no forms, accounts, comment boxes, newsletters or payment features.
The only way I receive personal information directly is if you choose to email me. The "say hi" and "Mail" links just open your own email app. If you write to me, I receive your email address, your name if you include it, and the content of your message and any attachments. I use this only to read and reply to your message and continue the conversation you started. I don't add you to any mailing list.
My email is provided by Google (Gmail), so your message is also processed under Google's Privacy Policy. Please don't email me sensitive information such as passwords, bank or card details, government ID numbers or health information.
03Data processed automatically when you visit
Loading any website means your browser connects to servers, and those servers receive some technical information. The site's own code doesn't collect this information, but the services below process it.
Cloudflare: hosting, security and analytics
The site is hosted on Cloudflare Pages and served through Cloudflare's network. To deliver pages and protect the site from attacks and abusive bots, Cloudflare processes your IP address, browser and device details (user agent), the page requested, the referring page, the date and time, and an approximate location derived from your IP address. Specifically:
- Automated browser check. Cloudflare adds a small script to each page that checks whether your browser behaves like a real browser rather than a bot. The result is stored in a security cookie (see section 04).
- Firewall and bot protection. Cloudflare's firewall, bot protection, browser integrity check and script monitoring may block or challenge suspicious requests.
- Web Analytics. Cloudflare Web Analytics loads a script from
static.cloudflareinsights.comand sends page-view and page-speed measurements back through this site. Cloudflare says this analytics tool doesn't use cookies or local storage, and doesn't fingerprint visitors. - Email address protection. Cloudflare hides my email address in the page code from spam bots, and a small script reveals it on screen for you.
- Network error reports. If the site fails to load properly, for example because of a connection error, your browser may automatically send Cloudflare an error report to help diagnose network problems.
What I can see: my Cloudflare dashboard shows me aggregate statistics, such as visits, pages viewed, referring websites, countries, and browser and device types. Cloudflare's security tools can also show me details of individual requests, including IP addresses, for a sample of traffic and for requests that were blocked or challenged. I use this only to run and protect the site, and I don't try to identify visitors.
Cloudflare's own handling of this data is covered by the Cloudflare Privacy Policy.
Fonts and code libraries
To show fonts, icons, animations and sound, your browser downloads files directly from the providers below. Each provider receives your IP address and user agent. The site's Referrer-Policy means they're only told the request came from bajkamalsingh.me, not which page you were on.
| Provider | What it serves | Server |
|---|---|---|
| Google Fonts (Google) | Web fonts | fonts.googleapis.com, fonts.gstatic.com |
| CDNFonts | Web font (Open Sauce One) | fonts.cdnfonts.com |
| Tailwind CSS | Styling framework | cdn.tailwindcss.com |
| jsDelivr | Icon library (Lucide) | cdn.jsdelivr.net |
| cdnjs (hosted by Cloudflare) | Animation and sound libraries (GSAP, Tone.js) | cdnjs.cloudflare.com |
| unpkg | Smooth-scroll library (Lenis) | unpkg.com |
These providers act independently under their own privacy policies. I don't receive any data from them.
04Cookies and browser storage
The site's own code doesn't set any cookies. It also doesn't use your browser's local storage, session storage, IndexedDB or service workers.
Cloudflare sets strictly necessary security cookies to protect the site, such as:
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
cf_clearance | Cloudflare | Stores the result of the automated browser check, or of any security challenge you pass, so you aren't checked on every page | Short-lived (minutes) |
__cf_bm | Cloudflare | Tells human visitors and bots apart (Bot Fight Mode) | Expires after about 30 minutes of inactivity |
Cloudflare lists all the cookies it may use in its cookie documentation. These cookies are used only for security. They aren't used for advertising or to track you across websites, so the site doesn't show a cookie consent banner. You can block or delete cookies in your browser settings. The site will still work, but you may see security checks more often.
05What I don't do
- I don't sell, rent or trade personal data.
- I don't share personal data for advertising or build profiles of visitors.
- I don't use Google Analytics, Meta Pixel, advertising networks or session-recording tools.
- I don't intentionally collect sensitive personal data.
- I don't make automated decisions about you that have legal or similarly significant effects.
- The site doesn't track you across other websites, so there's nothing extra to switch off if your browser sends a Do Not Track or Global Privacy Control signal.
06Why data is processed (legal basis)
- Delivering and securing the site (Cloudflare and the providers above): this is needed to show you the site, keep it working, and prevent attacks and unauthorised access. Under the GDPR, the basis is legitimate interests (Article 6(1)(f)).
- Replying to your emails: you send this information yourself so that I can reply. Under the DPDP Act, this is processing for the purpose you voluntarily provided it for (Section 7(a)), and you can tell me at any time to stop. Under the GDPR, the basis is legitimate interests, or steps you ask for before a contract (Article 6(1)(b) and (f)).
07How long data is kept
- Emails: I keep them only as long as they're useful for our conversation or opportunity, and I'll delete them if you ask.
- Cloudflare logs and analytics: kept by Cloudflare for the limited periods set by Cloudflare. I can't change these periods.
- Font and library providers: kept according to each provider's own policies.
08Security and breaches
The site is served only over HTTPS. Plain HTTP visits are redirected, and HTTP Strict Transport Security is enabled. The site also uses:
- a Content Security Policy that restricts which outside servers can supply code, styles and fonts;
- Subresource Integrity checks on most third-party scripts;
- headers that stop the site being embedded in other websites;
- Cloudflare's firewall and bot protection.
No system is completely secure. If a personal data breach ever affects information I hold, I'll inform the affected people and the Data Protection Board of India as the law requires. If you find a security issue, please report it privately to bajkamalsingh1@gmail.com.
09International transfers
Cloudflare, Google and the other providers above run global networks, so technical data may be processed in countries other than yours, including the United States. They apply their own safeguards to these transfers, as described in their privacy policies.
10Your rights
Depending on where you live, you may have the right to:
- ask what personal data I hold about you and how it's used;
- have it corrected, completed or updated;
- have it erased;
- withdraw consent or object to processing;
- restrict processing or receive a copy of your data (under the GDPR);
- nominate someone to exercise your rights if you die or become incapacitated (under the DPDP Act);
- raise a grievance with me, and then with a regulator.
In practice, the only personal data I hold myself is the emails people send me. To make a request, email bajkamalsingh1@gmail.com. I may need to confirm it's really you before acting on it. I'll respond as soon as I can, and within 30 days at most. For data held by Cloudflare, Google or another provider, you can also contact them directly.
If you aren't satisfied with my response, you can complain to the Data Protection Board of India, or to your local data protection authority if you're in the EU or UK.
11Children
This site is a professional portfolio and isn't directed at children under 18. I don't knowingly collect personal data from children. If you believe a child has sent me personal information, contact me and I'll delete it.
12Other websites
The site links to other platforms, such as Instagram and LinkedIn, and may mention other brands' websites. Those sites have their own privacy practices, which I don't control. Please read their policies when you visit them.
13Changes to this policy
I'll update this policy whenever the site changes the way it handles data, for example if I add a contact form or a new analytics tool. The "Last updated" date at the top always shows the latest version.
14Contact and grievances
For questions, requests or complaints about privacy on this site, contact:
Bajkamal Singh
Delhi, India
bajkamalsingh1@gmail.com