Privacy Policy

1. Information You Give Me

When you submit the contact form, request a resource, or book a call, I collect only what those forms ask for:

• Your name and email address
• Your company name and monthly ad budget range, when you choose to share them
• The message and goals you write for me
• Any details you volunteer when we schedule or hold a call

There is no account to create and no password to store. I do not ask for payment card numbers, government identifiers, or other sensitive data through this website.

2. Information Collected Automatically

Like most websites, onlydeb.com records standard technical and usage data through the analytics tools listed in section 5:

• IP address and approximate location derived from it
• Browser, device, and screen information
• Pages viewed, time on page, scroll depth, and the links you click
• The referring site or search that brought you here

Some analytics tools (Microsoft Clarity and Hotjar) also record anonymized session replays and heatmaps of general interactions, such as clicks and scrolling, to show where the site works well and where it does not. These tools mask text input by default so they do not capture what you type into forms.

3. Data Stored in Your Own Browser

This site includes an optional gamified layer (progress points, achievements, a save file, sound and display preferences, and a few interactive tools). That state is kept in your browser's local storage on your own device. It stays on your device, is not personal information, and is not transmitted to me. Clearing your browser storage resets it at any time with no effect on anything else.

4. How I Use Your Information

• To reply to your message and schedule or run a strategy call
• To understand which content and tools are useful so I can improve the site
• To keep the site secure and prevent spam and abuse
• To send you a resource you asked for, or occasional updates if you opted in
• To meet legal and accounting obligations

I do not sell, rent, or trade your personal information. I do not use your form submissions to build advertising audiences.

5. Tools and Third Parties

The site currently runs these services, each governed by its own privacy policy:

• Google Analytics 4: aggregate traffic and engagement measurement
• Microsoft Clarity: anonymized session replay and heatmaps
• Hotjar: heatmaps and behavior analysis
• Cloudflare: hosting, content delivery, security, and privacy-preserving web analytics
• EmailJS: delivery of contact and resource form submissions to my inbox
• Google reCAPTCHA: spam and bot protection on forms, subject to Google's Privacy Policy and Terms
• Google Calendar Appointment Scheduling: the embedded booking scheduler, if you choose to book a call

Because I work in paid advertising, the site is also provisioned to use conversion and remarketing measurement from major ad platforms, including Google Ads, Meta, Microsoft Advertising, and LinkedIn. When any of these are active, they may set cookies to measure campaigns and show relevant ads, subject to each platform's own policies. You can limit this through the ad settings of those platforms and the choices below.

6. Cookies and Your Choices

This site does not show a cookie consent banner, so the analytics tools above load when you visit. You remain in control:

• Adjust or block cookies in your browser settings
• Install the Google Analytics opt-out add-on
• Enable Global Privacy Control or Do Not Track in your browser, which the tools honor where required
• Use the ad settings pages of Google, Meta, Microsoft, and LinkedIn to control advertising cookies

Blocking cookies does not stop you from reading the site or contacting me.

7. Data Retention

I keep the messages and contact details you send for as long as needed to help you and to maintain normal business and accounting records, then delete them. Analytics data is retained according to each provider's standard retention settings. You can ask me to delete your contact records at any time.

8. Your Rights

Depending on where you live, you have rights over your personal data. I honor these rights for every visitor regardless of location.

If you are in the UK, EU, or EEA (UK GDPR and GDPR): you can request access, correction, deletion, restriction, or portability of your data, and object to processing. My lawful bases are your consent (for optional updates), legitimate interest (for site analytics and security), and the steps needed to respond to your request.

If you are in California (CCPA and CPRA): you can request to know, delete, or correct your personal information, and opt out of any sale or sharing. I do not sell your personal information.

To exercise any right, email debroop9@gmail.com. I respond within 30 days.

9. International Data Transfers

I operate from India and use service providers based mainly in the United States and Europe, so your data may be processed outside your own country. Those providers rely on recognized safeguards such as Standard Contractual Clauses. By using the site or contacting me, you understand your data may be handled in these locations.

10. Data Security

The site is served over HTTPS with a strict content security policy, and I limit who can see the messages you send. No method of transmission or storage is perfectly secure, but I take reasonable steps to protect your information and work only with reputable providers.

11. Children's Privacy

This is a business-to-business site and is not directed to children under 16. I do not knowingly collect information from children. If you believe a child has contacted me, let me know and I will delete the information.

12. Changes to This Policy

I may update this policy as the site or the tools it uses change. The date at the top shows the latest version. Meaningful changes will be posted here.

13. Contact