Privacy policy. Short, because it can be.

I'm Anirudh Goel. This page says what this site collects and why.

What this site collects

A visit log, two analytics tools, and what you send through the contact form. No advertising.

The visit log is Footfall, a small tool I run on Cloudflare to see which pages people read. For each page it records the page, the time, the site that sent you and any campaign tags in the link, your city, region, country and network as Cloudflare reads them from your IP address, your device, browser, screen and language, and how long you stayed and how far you scrolled. It keeps a salted hash in place of your IP address, and random IDs in your browser's storage so a return visit counts as the same reader. When someone first interacts with a page, a short alert reaches me and Arnav, my partner at AMB, on Telegram. Visits are kept for 12 months, then deleted.

Google Analytics counts visits, where they came from, and which pages lead to a message or a booked call. It loads once you first scroll, tap or press a key, and sets cookies (named _ga) so a return visit counts as the same browser. Google keeps the event data for 14 months, under its own terms.

PostHog, on its EU servers, shows me how pages are used: clicks, scrolling, and a replay of the visit so I can fix what confuses people. Anything typed into a field is masked in the replay, and your IP address is dropped. Replays are kept for 30 days. It loads through the visit log and keeps a random ID in a cookie and your browser's storage.

Visitors in the EEA, the UK and Switzerland are not logged or tracked. Before any of this loads, the page asks this site which country you are in, as Cloudflare sees it, and loads none of it for those countries or when the country is unknown.

The contact form sends what you type (your name, WhatsApp number or email, your site, your message and a budget if you pick one) with the page you sent it from, your country and whether you are on a phone. Outside the EEA, the UK and Switzerland it also sends the first page of your visit, the site that sent you there, and the Google Analytics and PostHog IDs of your visit, so I can see which pages led to it. It is saved in a Cloudflare database, and a copy reaches me on Telegram and by email so I can reply quickly. It is kept for 12 months, then deleted, unless we end up working together. Cloudflare's Turnstile checks the form for bots once you start filling it in.

Booking a call happens on Cal.com. When you book, Cal.com sends this site your name, email, the time and any notes you add, and outside the EEA, the UK and Switzerland the first page of your visit, the site that sent you there and the Google Analytics and PostHog IDs of your visit. It is kept for 12 months like the form, and a copy reaches me on Telegram and by email.

One setting stays in your browser: whether the site's sounds are on. It never leaves your device.

Other services

Cloudflare hosts the site and handles each request under its own privacy policy. Booking a call goes through Cal.com and Google Meet, WhatsApp is run by Meta, and email to hello@anirudhgoel.xyz lands in my mailbox, which Google hosts. Each works under its own policy, as do the other sites this one links to.

Your rights

Ask what I hold about you, or ask me to correct or delete it: write to hello@anirudhgoel.xyz. Nothing is sold or shared for advertising.

Changes

If the site starts collecting anything new, this page will say what and why before it does. The date at the top is this page's version.