Privacy policy.
Nothing is tracked until you explicitly opt in. You can manage your preferences on the privacy settings page at any time.
Who is responsible
Prasad Gupte, Berlin, Germany.
Contact: privacy@prasadgupte.com
What we collect
Server logs
Cloudflare may log IP addresses, browser type, and page visits to operate the CDN. This data is not accessible to us in an individually identifiable form. See Cloudflare's privacy policy.
Contact forms
Name, email, and message you submit are used only to respond to your inquiry. Delivery via Resend. Forms protected by Cloudflare Turnstile (no cookies, no tracking).
Payments & enrollment
When you enroll in a cohort, we collect your name, email, billing address, and VAT ID (where provided) to issue an invoice and fulfil the contract. Payment is handled by Stripe — card data is entered directly into Stripe's hosted checkout and is never seen or stored by prasadgupte.com. Stripe acts as the processor for payment data; the legal basis is contract performance (Art. 6(1)(b) GDPR). Stripe's primary EU entity is Stripe Payments Europe Ltd. (Ireland), with onward transfer to Stripe, Inc. (USA) under Standard Contractual Clauses. Stripe retains transaction records per its retention policy (typically 7+ years to comply with DE/EU tax law). A Data Processing Agreement is in place. See Stripe's privacy policy.
Cohort confirmations and magic-link sign-in emails are delivered by Resend (Resend, Inc., USA) under Standard Contractual Clauses. Data categories: name, email, and message content. Legal basis: contract performance (Art. 6(1)(b) GDPR). Resend retains delivery logs per its retention policy (approximately 30 days). A Data Processing Agreement is in place. See Resend's privacy policy.
Cookies
No cookies are set until you make a choice. Categories:
| Category | Purpose | Services | Duration |
|---|---|---|---|
| Necessary | Stores your consent choice. Required for the site to respect your preferences. | pg_consent | 1 year |
| Analytics | Helps us understand which pages are visited and how people navigate the site. Data is aggregated. | Google Analytics (GA4), Microsoft Clarity, PostHog, Amplitude (when active) | Up to 2 years (varies by provider) |
| Marketing | Measures ad campaign effectiveness and enables relevant content across platforms. | Google Ads, Microsoft Advertising (UET), conversion tracking pixels (when active) | Up to 2 years (varies by provider) |
Change your choices anytime on the privacy settings page or via the "Cookie settings" link in the footer.
Local storage
Your light/dark theme preference is stored in local storage. Not a cookie, no personal data, not shared.
Legal basis
- Consent (Art. 6(1)(a)) — analytics and marketing cookies require your opt-in.
- Legitimate interest (Art. 6(1)(f)) — server logs and the consent cookie are necessary to operate and secure the site.
- Contract (Art. 6(1)(b)) — contact form data is processed to respond to your inquiry.
Data processors
| Service | Purpose | Location |
|---|---|---|
| Cloudflare | Hosting, CDN, DNS, Turnstile (CAPTCHA), D1 database | Global (EU-adequate) |
| Stripe | Payment processing for cohort enrollments | Ireland (EU) → United States (SCCs) |
| Resend | Transactional email (contact replies, cohort confirmations, magic-link delivery) | United States |
| Google (GA4, Ads) | Analytics, advertising (when enabled by consent) | United States |
| Microsoft (Clarity, UET) | Analytics, advertising (when enabled by consent) | United States |
| PostHog | Product analytics (when enabled by consent) | EU (Frankfurt) |
US transfers are covered by the EU-US Data Privacy Framework or Standard Contractual Clauses.
Retention
- Consent cookie: 1 year.
- Contact submissions: deleted within 90 days of resolution.
- Analytics: provider-dependent (14-26 months), configured to minimum.
- Server logs: per Cloudflare retention policy.
Your rights
Under the GDPR you can:
- Access, rectify, erase, restrict, or port your personal data.
- Object to processing based on legitimate interest.
- Withdraw consent anytime via privacy settings.
Email privacy@prasadgupte.com. We respond within 30 days.
Supervisory authority
Changes
This policy may be updated for new services or legal requirements.
Last updated: 21 June 2026