Privacy policy

The site is run by [Operator legal name], which decides how the limited personal data described here is used (the “data fiduciary” under the Digital Personal Data Protection Act, 2023). This policy also serves as the privacy policy required under the Information Technology Act, 2000 and its rules.

Some features remember your choices using your browser’s local storage. This data stays on your device, is never sent to us, and we cannot see it:

You can remove it at any time by clearing this site’s data in your browser settings.

To understand which pages and tools are useful and to find errors, we use PostHog, a product analytics service. When analytics is on, your browser sends:

• the pages you view and the page you arrived from;
• the words you type into the site’s search box, and the results, links and buttons you use (for example, comparing funds or exporting a table);
• technical details such as browser, operating system, screen size and language;
• an approximate location (country and city) estimated from the network address your browser connects from;
• error reports if a page fails, with the page address and a technical description of the error.
• a recording of how you use some pages (see below).

These are tied to a random identifier stored in your browser (in local storage and a first-party cookie named beginning ph_), not to your name or any account. We do not collect what you type into forms other than search, and do not create profiles of identified people. Please do not type personal information into the search box.

Session recordings. To find confusing layouts and bugs, we record how some visits use the site: the pages’ layout as you saw it, scrolling, mouse movement and clicks. This is a reconstruction of the page, not a video of your screen, and it covers this site only. Everything typed into form fields is masked and never captured. Recordings are tied to the same anonymous identifier, are viewed only by the people who run the site, and are deleted after 30 days. Switching analytics off below also stops recording.

If your browser sends a Do Not Track signal, no analytics is collected. Ad and tracker blockers may also stop it, and the site works fully either way.

Like almost every website, the servers that host the site record basic details of each request, such as the network (IP) address, the time, the page requested and the browser type. These logs are used only to keep the site running and secure, to stop abuse, and to diagnose faults, and they are kept for a short period set by our hosting provider before being deleted.

We use the information above only to:

• run the site and keep it secure;
• understand, in aggregate, how the site is used, and improve it;
• find and fix errors;
• meet legal obligations.

By using the site with analytics on, you consent to this processing; you can withdraw that consent at any time with the control below, and withdrawing it does not affect the rest of the site. Security logs are kept for legitimate uses permitted by law.

We do not sell, rent or trade personal data, and we do not use it for advertising. It is processed for us by:

• PostHog, Inc. (analytics), on servers in the United States;
• our hosting and infrastructure providers, which serve the site and keep its logs.

These providers act on our instructions and are bound to protect the data. Some of them store data outside India, which the DPDP Act permits except to countries the Government of India restricts. We may also disclose information if the law, a court or a government authority requires it.

Analytics data is kept for no more than 12 months and then deleted. Server logs are kept only for the short period set by our hosting provider. Data in your browser stays until you clear it.

The site is served only over encrypted connections (HTTPS) with a strict content security policy, and analytics is sent through the site’s own address. Access to analytics and hosting is limited to the people who run the site. No method of transmission or storage is perfectly secure, but because we hold no accounts, passwords or financial details, there is little about you that could be exposed.

Under the Digital Personal Data Protection Act, 2023 you may ask us:

• for a summary of the personal data we hold about you and how it is used;
• to correct, complete or erase it;
• to stop processing based on your consent (the analytics switch below does this immediately);
• to address a grievance, and to nominate someone to exercise these rights for you.

Because analytics is anonymous, we can find your data only if you send us the anonymous identifier shown below. Email it to us with your request. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

The site is meant for adults researching investments. It is not directed at children, and we do not knowingly collect personal data from anyone under 18 or track them. If you believe a child’s data has been collected, contact us and we will delete it.

If what we collect changes, we will update this page and the date at the top, and note significant changes on the site before they take effect. See also the terms of use.

For privacy questions, data requests or complaints:

[Operator legal name]. Email [contact email]. We acknowledge messages within two working days and aim to resolve them within fifteen days.