Skip to content
Back to Portfolio

Privacy Policy

Last updated: February 4, 2026

This Privacy Policy explains how information is collected, used, and protected when you visit krishcodes.dev (the "Website").

Definitions and Key Terms

  • Website refers to krishcodes.dev
  • User refers to anyone visiting or contacting through the Website
  • Personal Data refers to information you voluntarily provide (name, email, message)

Information We Collect

We collect information only when you voluntarily submit it through the contact form, including:

  • Name
  • Email address
  • Message content

Automatically Collected Technical Information:

  • IP address (for rate limiting and spam prevention)
  • Browser type and version
  • Device type (desktop/mobile)
  • Timestamp of form submission

We do NOT collect:

  • Passwords or account credentials
  • Payment information
  • Social security numbers
  • Location data (GPS)
  • Browsing history or cookies

How We Use Your Information

The information you provide is used strictly to:

  • Respond to your inquiries
  • Communicate regarding your message
  • Prevent spam and abuse

We do NOT:

  • Send newsletters or marketing emails
  • Share or sell your data
  • Profile users for advertising
  • Track your behavior across websites

Spam Prevention & Rate Limiting

To protect against spam and abuse, we implement:

  • Rate limiting (maximum 3 contact form submissions per minute from the same IP address)
  • Input validation and sanitization
  • Server-side security checks

Your IP address may be temporarily stored for rate limiting purposes and is automatically deleted after 24–48 hours.

Cookies & Tracking Technologies

This Website does not use cookies for tracking, analytics, or advertising purposes.

Essential Functionality Only:

The Website may use browser storage solely for:

  • Remembering animation state (boot sequence)
  • Preventing duplicate form submissions

This data is stored only in your browser and is never transmitted to our servers.

We do NOT use:

  • Google Analytics
  • Facebook Pixel
  • Retargeting tools
  • Advertising trackers
  • Third-party cookies

Third-Party Services

This Website uses the following third-party services:

Hosting & Infrastructure

Vercel — Website hosting and deployment

  • Data processed: Request metadata and server logs

Email Delivery

Resend — Contact form email delivery

  • Data processed: Name, email address, message content

Data Security

Technical Protections:

  • HTTPS/TLS encryption for all data transmission
  • Server-side input validation and sanitization
  • Rate limiting to prevent spam and abuse
  • XSS (Cross-Site Scripting) protection
  • CSRF (Cross-Site Request Forgery) protection

Organizational Measures:

  • Access to submitted data limited to site owner only
  • No sharing of data with third parties (except email service provider)
  • Regular security updates and dependency audits

No system can be guaranteed 100% secure. While we follow industry best practices, you should not submit highly sensitive information through the contact form.

Data Retention

Contact Form Submissions

  • Retained for up to 12 months from submission date
  • You may request deletion at any time

Technical Logs (IP addresses, timestamps)

  • Retained for 24–48 hours for spam prevention
  • Automatically deleted after this period

Your Rights

  • Right to Access: Request a copy of the data we hold about you
  • Right to Correction: Request correction of inaccurate information
  • Right to Deletion: Request deletion of your data
  • Right to Object: Object to processing of your data
  • Right to Data Portability: Request your data in a portable format

To exercise these rights, use the Website's contact form. I will respond within 30 days.

International Data Transfers (GDPR)

  • Your data may be transferred to and processed in the United States
  • Data processing is based on your consent when submitting the contact form
  • You have the right to lodge a complaint with your local data protection authority

Children's Privacy

This Website is not intended for children under 13. We do not knowingly collect personal information from children.

Changes to This Policy

This Privacy Policy may be updated occasionally. Changes will be reflected on this page with an updated revision date.

Contact

For questions regarding this Privacy Policy or to exercise your data rights, use the contact form on the main site.

© 2026 Krish Sanghavi. All rights reserved.