Privacy Policy
Effective October 1, 2026. Notice version 2026-10-12.
हिंदी में पढ़ें. Other languages listed in the Eighth Schedule of the Constitution of India are available on request.
This notice describes personal data on https://papatechsolutions.com. It matches what the site does today. It is not legal advice.
Papa Tech Solutions ("we") is a software consultancy at D2 - 2004 Divyansh Onyx, Jaipuria Sunrise Greens, Ghaziabad 201002, Uttar Pradesh, India. Email support@papatechsolutions.com. Phone +91 7838660180. Published apps have their own notices:
- Water Reminder & Hydration Log
- Stereogram Quiz
- Stereogram Generator
- Ball Jump: Tap to Bounce
- Memory Game - Brain Training
- MacLens
What this site collects
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Contact form: name, email, project type, timeline, message, the fact that you agreed, the time, and the notice version | To read and reply to the inquiry | Your consent, and steps you asked for before a contract | 12 months after submission, then deleted |
| A keyed hash of your IP address and of your email, used only as a rate-limit counter. The raw IP is not stored in that counter | To limit repeated submissions | Legitimate interest in stopping abuse | About 2 hours, then deleted |
| Cloud logs of a submission: IP address, user agent, and request time | Security and troubleshooting | Legitimate interest, and log-keeping duties | 12 months |
| Analytics, only after you press Accept: page views and events such as a form submission. Events do not include your name or email. Accept also sets _ga cookies | To see which pages are used | Consent | Event data 2 months. The _ga cookie can last up to 2 years, until you reject |
| On your device: your analytics choice, checklist ticks, and (only after Accept) campaign tags from the page address | To remember your choice and your progress | Consent for campaign tags; the rest stays on your device | Until you clear site data, or until the tab closes for campaign tags |
The contact form is stored in Cloud Firestore through a Cloud Function. The site itself cannot read that database. The checkbox is not pre-ticked.
The Vibe Coding Security Checklist PDF is a public file. Downloading it does not ask for your email, and we do not email it to you. Campaign links may add ordinary URL parameters such as utm_source. We attach those to a stored inquiry only if you later submit a form, and only after you have accepted analytics.
What this site does not do
- We do not sell personal data, and we do not share it for cross-context advertising.
- Fonts are self-hosted. Pages do not request Google Fonts.
- There is no session replay.
- The site does not sell subscriptions.
- Visitors cannot upload files.
- We do not run a marketing-email list from this site. A reply to your inquiry is not a newsletter.
- The site is not for anyone under 18. We do not knowingly collect a child's data, and there is no age gate.
Who processes it
- Google Firebase and Google Cloud, for hosting, Cloud Functions, Firestore, and logs.
- Google Analytics, only after you accept.
- Google Gmail, because we read inquiries and reply from support@papatechsolutions.com.
We do not send contact details to any other service. A separate email gate for the checklist PDF is switched off.
Where data is stored
The site is hosted on Firebase Hosting. The Cloud Function that receives a form runs in Mumbai (Google Cloud region asia-south1). Contact inquiries are stored in Cloud Firestore in the United States (the nam5 multi-region). Analytics, when you accept it, is processed by Google in the United States. Gmail may process mailbox data outside India.
The Digital Personal Data Protection Act, 2023 allows a transfer outside India unless the Central Government restricts the destination country. For people in the UK or the European Economic Area, the transfer relies on Google's data processing terms and the standard contractual clauses those terms include.
Cookies
Until you press Accept, this site does not set analytics cookies. After Accept, Google Analytics may set _ga and _ga_… cookies, which can last up to two years. Reject, or Privacy choices in the footer, stops collection and deletes those cookies in this browser. Your choice itself is stored in local storage under the key papa-analytics-consent, together with this notice version, not in a cookie. If this notice version changes, we ask again.
We do not change the site's behaviour in response to a browser Do Not Track signal. The choice is the Accept and Reject banner.
Security and breach notice
We keep reasonable safeguards around the contact store: the browser cannot read it, submissions are checked on the server, and repeated submissions are limited. Transport uses HTTPS.
If a personal-data breach occurs, we will tell affected people and the Data Protection Board of India in the form and time the Digital Personal Data Protection Rules require. Cyber incidents that CERT-In requires to be reported are reported within six hours. A more detailed report to the Board follows within 72 hours where the rules require it.
Your rights
You can ask to access, correct, or erase contact details we hold, withdraw consent for that inquiry, or nominate someone to exercise these rights if you die or become unable to act. Email support@papatechsolutions.com. We reply within 30 days. We may ask for enough information to confirm the request is yours. Withdrawing consent does not undo a reply we have already sent.
Withdrawing analytics consent is the Privacy choices control in the footer.
If the UK GDPR or the EU GDPR applies to you, you can also ask us to restrict or stop processing based on legitimate interests, ask for a portable copy of data you provided, and complain to the Information Commissioner's Office or your local supervisory authority.
Grievance Officer
Grievances about personal data on this site go to Ankit Ahuja, Grievance Officer, Papa Tech Solutions.
Email support@papatechsolutions.com. Phone +91 7838660180. D2 - 2004 Divyansh Onyx, Jaipuria Sunrise Greens, Ghaziabad 201002, Uttar Pradesh, India.
We acknowledge a grievance and aim to resolve it within 30 days. You may also complain to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
California
We do not sell personal information and we do not share it for cross-context behavioural advertising. We do not offer a financial incentive for personal information. To ask what we hold or to ask for deletion, use the contact above.
Changes
We post changes on this page and update the effective date and the notice version. A new notice version asks for your analytics choice again. The Hindi version is at /privacy-policy/hi/.