Privacy Policy

Publisher, website and scope

SignalFold is an independent digital publication published by Sachin Swami at https://signalfold.wellduck32.chatgpt.site. This policy covers the publication’s public pages, contact form and optional audience measurement. Contact the publisher through Contact for privacy questions or a rights request. If a public correspondence email or location is supplied, it appears there. We do not automatically publish the owner’s sign-in email or home address.

Information you provide

The contact form asks for your name, email address, subject and message. We use them to review and respond to your request, investigate corrections, and handle rights or privacy questions. Messages are saved in the publisher’s private inbox; they are not automatically emailed or published as comments. Do not submit passwords, payment information, identity documents or other unnecessary sensitive information.

There are no public reader accounts, purchases or newsletter subscriptions currently offered. Only the publisher signs in to the private studio through the hosting provider’s authentication service.

Optional visitor and reading-time analytics

If you choose Allow analytics, this site creates a random browser identifier and visit identifier in local browser storage. It sends first-party measurements to this website: the public page path, a random page-view identifier, visit activity and accumulated active reading time. The application stores hashed versions of the random identifiers, server receipt times and daily totals. These are pseudonymous records, not a list of identified people.

Reports show estimated distinct browsers, visits, page views and active-time groups. Reports are available only to the authenticated website owner. We do not publish the audience report, send this analytics data to Google Analytics, or use it for cross-site advertising. Hosting infrastructure necessarily processes the requests.

Active time is measured while the page is visible and focused, and pauses after 60 seconds without interaction. A visit restarts after 30 minutes without a measurement. Browser identifiers rotate after 90 days. Reports use India Standard Time; a timing interval spanning midnight is assigned to the day it is received. Incomplete transmissions, blocking, multiple devices and consent choices affect counts.

Analytics does not intentionally collect your name, email, precise location, device fingerprint, referrer or search-query text. Raw IP addresses and complete user-agent strings are not saved in the application’s audience tables. The request’s user agent may be checked for obvious automated traffic without being stored there.

Optional browser-based analytics starts only after you choose Allow analytics. You can refuse without losing access to the publication. Open Privacy choices in the footer to withdraw consent or delete analytics records linked to this browser’s current identifier. Deletion stops optional collection; a failed deletion shows an error so you can retry. To prevent delayed requests from recreating deleted data, we retain a hashed deletion marker for up to 90 days. It contains no browsing history and is used only to reject that deleted identifier. Clearing site storage before requesting deletion can remove the identifier needed to locate your records.

The application respects detected Global Privacy Control and Do Not Track signals by keeping optional analytics off. Consent choices are stored for up to 180 days before the site asks again. This first-party analytics control is not an advertising consent-management platform or a Google certification.

Log files, security and essential processing

Like other websites, our hosting and network providers process connection information to deliver pages and protect services. Provider logs may contain IP addresses, timestamps, requested URLs, browser/network information, response codes and diagnostic details. Provider retention and processing are governed by their own policies; this notice does not claim to control those logs.

To limit spam and measurement abuse, the application keeps temporary request counters using an hourly hash derived from the request IP. Raw IPs are not stored in those counters. Hashing does not by itself make a record anonymous. Counter records expire after about an hour and are removed during subsequent cleanup requests. Separately, aggregate article-load totals contain only an article reference, date and count. These totals do not create a browser identifier and help select the publication’s most-read articles.

Cookies and browser storage

The site stores your light/dark preference in sf-theme. Optional analytics uses sf-analytics-choice-v1, sf-visitor-v1 and sf-visit-v1 in localStorage, subject to the choices above. Hosting and ChatGPT authentication may use necessary cookies for security and owner sessions. Read the Cookie Policy for the individual purposes and durations. No Google Analytics or advertising script is currently loaded by the publication.

Google AdSense is not currently serving ads on SignalFold. No Google advertising cookie is intentionally set by the publication at this stage. This section explains planned disclosures if advertising is introduced; it is not a statement of AdSense approval.

Older privacy notices sometimes call Google advertising cookies DoubleClick or DART cookies. Google’s current documentation refers to advertising cookies; actual cookie names and uses depend on the services enabled. If Google ads are activated, third-party vendors, including Google, may use cookies to serve ads based on visits to this website or other websites. Google’s advertising cookies can enable Google and its partners to deliver personalized ads based on such visits, subject to applicable settings and consent requirements.

You can manage personalized Google advertising through Google Ads Settings. See how Google uses information from partner sites and Google’s advertising technologies. Browser cookie controls and vendor opt-outs are additional choices; they do not necessarily disable all advertising or all necessary processing.

Third-party advertising partners

There are currently no active advertising-network integrations in this application. Before enabling them, we will identify the actual vendors and link their privacy/choice pages, update this notice, and implement the applicable consent process. Personalized Google ads for people in the EEA, UK and Switzerland require a Google-certified CMP integrated with the IAB TCF under Google’s rules. Other ad modes also need to meet applicable privacy and consent requirements. The current analytics choices panel does not fulfill that advertising integration.

External article sources, sharing links and merchant websites have their own practices. We do not load social tracking widgets simply to display sharing links. Review another service’s privacy notice before interacting with it.

Purposes and legal bases where applicable

For optional analytics, we rely on your consent. Necessary site operation, abuse prevention and handling ordinary correspondence serve our legitimate interests in running and protecting the publication and responding to requests, where that basis is available and balanced against your rights. Processing may also be necessary to meet a legal obligation or address a legal claim. We do not use analytics for decisions with legal or similarly significant effects about individual readers.

Recipients, retention and security

The publisher has access to the private studio and its records. OpenAI Sites and its hosting infrastructure, including Cloudflare services, process data to operate the website, authentication, database and file storage. Infrastructure providers may process data in countries different from your own, under their service terms and applicable transfer arrangements. We do not represent this site as guaranteeing a particular storage region. See OpenAI privacy information and Cloudflare’s privacy policy.

Application contact messages, aggregate article counts and browser-linked analytics are retained for approximately 90 days. Expired data is removed on subsequent applicable application requests, not by a guaranteed midnight deletion job. Analytics reports exclude dates outside their 90-day reporting window. Separately downloaded backups, correspondence in an email app and provider logs may have different retention; we do not automatically include analytics identifiers or contact messages in content exports.

Server authorization restricts administrative reports and content management to the configured owner. We use HTTPS-compatible hosting and limit data collection, but no internet service can promise absolute security. Information may be disclosed when legally required or necessary to address abuse and protect rights.

Where the GDPR or UK GDPR applies, your rights may include access, correction, erasure, restriction, objection and data portability, subject to the law’s conditions and exceptions. You may withdraw consent without affecting processing already performed lawfully, and complain to a competent data-protection supervisory authority. Use Privacy choices for browser analytics controls or Contact for other requests. Include enough information to identify the relevant message or record; do not send identity documents unless a necessary, proportionate verification process is separately explained. We assess requests and applicable response deadlines according to the relevant law.

California rights: CCPA and CPRA

Where the CCPA as amended by the CPRA applies to the publication and your request, rights may include knowing and accessing collected information, correction, deletion, opting out of sale or sharing, limiting specified uses of sensitive personal information, and exercising rights without unlawful discrimination. Applicability depends on legal thresholds and circumstances; this statement is not a claim that every small publication is subject to every CCPA requirement.

The current application does not sell personal information or share it for cross-context behavioral advertising. It does not request sensitive personal information for audience measurement. Identifiers/internet activity and contact details are used for the purposes and shared with operating providers described above. Detected Global Privacy Control disables optional analytics. If advertising or other practices change, we will review the applicable choices and notices before activation. Submit a California privacy request through Contact.

Children and changes

The publication is intended for a general audience and does not knowingly request personal information from children under 13. A parent or guardian can contact us about information a child may have submitted so we can investigate and remove it where appropriate.

This policy was updated on 27 October 2026. Material changes to collection or advertising will be reflected here and, where required, presented before requesting new consent. This notice describes current practices; it is not a guarantee of AdSense approval or certification of compliance with every jurisdiction’s law.