Last updated: 25 September 2026

Key takeaways

Who this policy covers

This policy covers clairstack.com, operated by Ritik Malhotra as an individual, who acts as the data controller (GDPR) and data fiduciary (India’s DPDP Rules) for this site.

Information we collect

Information you provide directly
Contact form or email: if you write to us, we keep your name, email address and message so we can reply and, where relevant, act on a correction request.

Information collected automatically
Server and analytics logs: standard technical data — IP address, browser and device type, pages visited, referring page, and time on page.
Analytics tool: we use Google Analytics 4 to understand, in aggregate, which content is useful.
Cookies: see the Cookies section below.

Cookies

Cookies are small files a site stores in your browser. Clairstack may use:

You can block or delete cookies in your browser settings at any time. Doing so may affect how parts of the site work.

Affiliate links

Some posts contain affiliate links, disclosed at the top of the post per our affiliate disclosure. When you click one, the merchant’s own site may set tracking cookies to attribute the referral — that’s governed by the merchant’s privacy policy, not this one. Clicking an affiliate link doesn’t cost you anything extra.

How we use information

We use the information above to operate and maintain the site, understand which content is useful, respond to messages and correction requests, and meet legal obligations. We don’t sell visitor data.

Your rights under GDPR (EU/UK visitors)

If you’re in the EU or UK, you have the right to access, correct, delete, restrict or object to our processing of your personal data, and the right to data portability. You can also lodge a complaint with your local data protection authority.

Legal basis for processing: consent (for cookies and any newsletter signup) and legitimate interest (for basic analytics and security).

Clairstack does not currently appoint an EU representative under GDPR Article 27, as its processing of EU/UK personal data is limited and incidental rather than a core, large-scale activity. This will be reviewed if that changes.

Your rights under India’s DPDP Rules

India’s Digital Personal Data Protection Rules were notified 13 November 2025 (G.S.R. 846(E)). As a Data Fiduciary, Clairstack processes personal data only for the purpose it was collected, honors withdrawal of consent, and provides a way to raise grievances.

Grievance Officer: Ritik Malhotra, reachable through the contact page for any data-related complaint.

Clairstack is not a Significant Data Fiduciary under the Rules. This will be reviewed if data volume, user accounts, or traffic grow substantially.

Data retention

Children’s privacy

Clairstack isn’t directed at children, and we don’t knowingly collect personal data from children. If you believe a child has provided us data, contact us and we’ll remove it.

Third-party links

Posts link to vendor documentation, government sources, pricing pages and other publishers. Their privacy practices are their own — this policy only covers clairstack.com.

Changes to this policy

We’ll update the “last updated” date above when this policy changes, and note material changes on this page.

Contact

Questions about this policy or requests about your data: use the contact page.