Privacy policy.

The short version

This website has no accounts, no analytics, no advertising trackers and no marketing cookies. We do not build profiles of visitors. The only personal data we collect is what you choose to send us — through the enquiry form or by email — plus standard server logs.

Who is responsible

Shadowtrace Solution Private Limited (CIN U63999MH2025PTC439586) is the data controller.

1st Floor, Vaswani Mansion, Dinshaw Vacha Rd, Churchgate, Mumbai, Maharashtra 400020, India
Data protection contact: [email protected]

What is collected automatically

Our web host records standard server logs when a page is requested — IP address, timestamp, the page requested, referring page and browser user-agent. These logs exist to keep the site running and to detect abuse. They are not used to identify you or to build a profile, and they are not shared for marketing. Legal basis: legitimate interest in operating and securing the service (GDPR Art. 6(1)(f)).

Fonts

Typefaces are served from this domain. No request is made to Google Fonts or any other font CDN, so your IP address is never disclosed to a font provider.

The enquiry form

When you submit the form on our contact page we collect your name, email address, company name if you give one, the subject you choose, and your message. We use them for one purpose: to answer you. We do not use them for marketing, and we do not sell or share them.

The form is processed on our own server and the emails are sent through Google Workspace, which hosts our mail. No form-handling service, analytics tool or advertising network sees your submission.

What happens when you submit. You get a confirmation email containing a reference number. A copy of the enquiry goes to our inbox. We reply within 7 days.

How long we keep it. Enquiries are retained for 24 months from the last contact about them, so we can pick up an earlier conversation, then deleted. If an enquiry becomes a contract, the record is kept for as long as the engagement and the statutory record-keeping period that follows it require.

Legal basis. Your consent, which you give with the checkbox on the form (GDPR Art. 6(1)(a)), and steps taken at your request before entering a contract (Art. 6(1)(b)). Under India's DPDP Act 2023 the basis is the consent you give at the point of submission. You can withdraw consent at any time by emailing us, and we will delete the enquiry.

Abuse prevention. To stop automated spam we record a one-way hash of your IP address with each submission and limit how many messages one connection can send in an hour. The hash cannot be reversed to recover your IP address, and it is deleted with the enquiry.

Who we are under Indian law

Under the Digital Personal Data Protection Act 2023, Shadowtrace Solution Private Limited is a Data Fiduciary for the personal data described on this page, and you are a Data Principal. You may access, correct, update or erase your data, nominate someone to exercise your rights, and raise a grievance with us. Grievances go to [email protected] and we will respond within 30 days. If you are not satisfied you may escalate to the Data Protection Board of India.

Google Maps

The contact page embeds a Google Maps frame so you can find our office. When that frame loads, Google receives your IP address and may set cookies under its own terms. If you decline in the consent bar, the map is not loaded and no request reaches Google. You can change that choice at any time from the link in the footer.

Google's handling of that data is described in the Google Privacy Policy.

Links out

Pages link to LinkedIn, Discord and to products we run (PC Part Hunt, Rust Samrajya). Following a link puts you under that site's own privacy policy — we have no control over and no access to what they collect.

Email you send us

If you email us instead of using the form, we keep the message and your address on the same terms as an enquiry above — used only to answer you, retained for 24 months from the last contact, then deleted. Legal basis: steps taken at your request prior to entering a contract, or legitimate interest in responding to enquiries.

Storage on your device

We store a single entry in your browser's local storage, st-consent, recording whether you accepted or declined the map embed. It contains no identifier, is never transmitted to us, and you can clear it from your browser at any time.

Your rights

If you are in the EU or UK, the GDPR gives you the right to access, correct, erase, restrict and port your data, to object to processing based on legitimate interest, and to complain to your national supervisory authority. If you are in India, the Digital Personal Data Protection Act 2023 gives you comparable rights of access, correction, erasure and grievance redressal.

To exercise any of these, email [email protected]. We will respond within 30 days.

International transfers

We are based in India. If you are in the EU or UK and load the map, that request goes to Google and may be processed outside your region under Google's own transfer safeguards.

Changes

If this policy changes materially we will update the date at the top of this page.