This Privacy Policy ("Policy") describes how the Vishnu Sahasranamam website (the "Site," "Service," or "Platform"), located at https://thousandvishnushloka.com and operated by the site owner ("we," "us," "our," or the "Operator"), collects, uses, maintains, discloses, and protects information obtained from users ("User," "you," or "your") of the Site. This Policy applies to the Site and all products, services, and features offered by the Operator through the Site.
1. Scope and Application
1.1. This Privacy Policy applies to all visitors, users, and others who access or use the Site, regardless of their geographic location, including users in the European Economic Area ("EEA"), United Kingdom ("UK"), California, and other jurisdictions with applicable data protection legislation.
1.2. By accessing or using the Site, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Policy, please do not access or use the Site.
1.3. This Policy is incorporated into and subject to our Terms of Use. Capitalized terms not defined herein shall have the meanings ascribed to them in the Terms of Use.
2. Information We Collect
2.1. Information You Provide Voluntarily. The Site does not require user accounts, registration, or authentication. However, if you choose to contact us through the contact form provided on the Site, you may voluntarily submit personal information including but not limited to: (a) your name; (b) your email address; and (c) the content of your message. We collect this information solely for the purpose of responding to your inquiry.
2.2. Information Collected Automatically. When you visit the Site, certain information may be collected automatically through the use of analytics technologies, including but not limited to:
- Device and Browser Information: browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, and device identifiers;
- Usage Data: pages viewed, time spent on pages, click interactions, scroll depth, navigation paths, referral source/URL, and search queries within the Site;
- Network Information: Internet Protocol (IP) address (which may be anonymized, truncated, or masked), approximate geographic location derived from IP address, and Internet Service Provider (ISP) information;
- Cookies and Similar Technologies: cookie identifiers, local storage data, and session identifiers as described in Section 5 below.
2.3. Information We Do Not Collect. We do not collect, process, or store any of the following categories of information: (a) financial or payment information; (b) government-issued identification numbers; (c) biometric data; (d) health or medical information; (e) racial or ethnic origin; (f) political opinions or religious beliefs; (g) trade union membership; or (h) information relating to criminal convictions or offenses.
3. Analytics and Tracking Technologies
3.1. Google Analytics 4 (GA4). We use Google Analytics 4, a web analytics service provided by Google LLC ("Google"), to collect and analyze information about the use of the Site. GA4 uses cookies, pixels, and similar technologies to collect and store information such as website usage statistics, user interaction data, and aggregated demographic information. The information generated by these technologies about your use of the Site is generally transmitted to and stored on Google's servers, which may be located in the United States or other countries.
3.2. Google Analytics operates under Google's own privacy policy, available at policies.google.com/privacy. For more information on how Google uses data when you use our Site, visit policies.google.com/technologies/partner-sites.
3.3. IP Anonymization. Google Analytics 4 does not log or store individual IP addresses. GA4 uses IP addresses at collection time to determine geolocation data and then immediately discards the IP address information, providing a measure of anonymization by default.
3.4. Cloudflare Turnstile. The contact form on the Site uses Cloudflare Turnstile, a CAPTCHA-alternative service provided by Cloudflare, Inc. ("Cloudflare"), to verify that form submissions are made by humans and not automated bots. Cloudflare may collect and process certain technical data (including IP address and browser characteristics) as part of this verification process, subject to Cloudflare's own privacy policy.
3.5. Google Fonts. The Site loads web fonts from Google Fonts, a font delivery service provided by Google. When you access pages that use Google Fonts, your browser may connect to Google's servers and transmit technical data such as your IP address and browser user agent string. This data is subject to Google's privacy policy.
4. Lawful Basis for Processing (EEA/UK Users)
4.1. For users located in the European Economic Area or the United Kingdom, we process personal data under the following lawful bases as defined by the General Data Protection Regulation ("GDPR") and the UK GDPR:
- Consent (Article 6(1)(a) GDPR): We process analytics data based on your affirmative consent, which you provide by accepting the cookie consent banner displayed on the Site. You may withdraw your consent at any time as described in Section 9.
- Legitimate Interests (Article 6(1)(f) GDPR): We may process certain data based on our legitimate interests in maintaining, securing, and improving the Site, provided that such processing does not override your fundamental rights and freedoms.
- Performance of a Contract (Article 6(1)(b) GDPR): When you submit a contact form, processing of the information you provide is necessary to respond to your inquiry.
5. Cookies, Local Storage, and Similar Technologies
5.1. What Are Cookies? Cookies are small text files that are placed on your device (computer, smartphone, tablet) when you visit a website. They are widely used to make websites work efficiently and to provide information to website operators.
5.2. Types of Technologies We Use:
- Essential Local Storage: We use browser localStorage to store your theme preference (light/dark mode) and cookie consent choice. These are strictly necessary for the proper functioning and personalization of the Site and do not require consent.
- Analytics Cookies: Google Analytics sets cookies (including
_ga,_ga_*) to distinguish unique users, throttle request rates, and collect statistical data about site usage. These cookies are set only with your consent. - Language Preference: Your selected language preference may be stored in localStorage to maintain your chosen language across visits.
5.3. Cookie Consent. Upon your first visit to the Site, a consent banner is displayed with two options: "Allow all" permits full analytics tracking, while "Strictly Needed" limits tracking to essential functions only (page views, error tracking, and form abuse prevention). Your choice is stored in localStorage and remembered for future visits.
5.4. Managing Cookies. In addition to the consent banner, you can manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be alerted when cookies are being sent. Please note that disabling cookies may affect the functionality of the Site. For information on managing cookies in your browser, consult your browser's help documentation.
6. How We Use Collected Information
6.1. We use the information we collect for the following purposes:
- To operate, maintain, and improve the Site and its content;
- To analyze usage patterns, trends, and user behavior to enhance the user experience;
- To measure and report on site traffic, page views, and engagement metrics;
- To diagnose and resolve technical issues, bugs, and errors;
- To respond to your inquiries, messages, and feedback submitted through the contact form;
- To detect, prevent, and address fraud, security breaches, and other potentially prohibited or illegal activities;
- To comply with applicable laws, regulations, legal processes, or governmental requests.
6.2. We do not sell, rent, lease, trade, or otherwise transfer your personal information to third parties for commercial or marketing purposes.
7. Data Sharing and Disclosure
7.1. We do not share your personal information with third parties except in the following limited circumstances:
- Service Providers: We use third-party service providers (such as Google for analytics, Cloudflare for security, and hosting providers for infrastructure) that may have access to certain data as necessary to perform their functions on our behalf. These service providers are contractually obligated to use such data only as directed by us and in accordance with this Privacy Policy.
- Legal Requirements: We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to: (a) comply with a legal obligation, subpoena, court order, or governmental request; (b) protect and defend the rights or property of the Operator; (c) prevent or investigate possible wrongdoing in connection with the Site; (d) protect the personal safety of users of the Site or the public; or (e) protect against legal liability.
- Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or other similar event, your personal information may be transferred to the successor entity, provided that the successor entity agrees to honor the terms of this Privacy Policy.
8. International Data Transfers
8.1. The Site is hosted on servers located in the United States. If you access the Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers maintain facilities.
8.2. For users in the EEA or UK, any transfer of personal data to countries outside the EEA/UK that do not benefit from an adequacy decision by the European Commission will be subject to appropriate safeguards, such as Standard Contractual Clauses ("SCCs") approved by the European Commission, or other valid transfer mechanisms under applicable data protection law.
8.3. By using the Site, you consent to the transfer of your information to the United States and other jurisdictions as described in this Policy, which may have data protection laws that differ from those in your jurisdiction.
9. Your Rights and Choices
9.1. General Choices. You may exercise the following choices regarding your data:
- Withdraw Consent: You may withdraw your consent to analytics cookies at any time by clearing the consent data stored in your browser's localStorage (key:
vishnu-consent) or by managing your browser's cookie settings. - Opt-Out of Google Analytics: You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.
- Do Not Track: Some browsers offer a "Do Not Track" ("DNT") setting. We currently do not respond to DNT signals, as there is no universally accepted standard for how to interpret such signals.
9.2. Rights Under GDPR (EEA/UK Users). If you are located in the European Economic Area or the United Kingdom, you have the following rights under the GDPR/UK GDPR, subject to certain conditions and exceptions:
- Right of Access (Article 15): You have the right to request confirmation as to whether we process your personal data and, if so, to obtain a copy of such data.
- Right to Rectification (Article 16): You have the right to request correction of inaccurate personal data concerning you.
- Right to Erasure (Article 17): You have the right to request deletion of your personal data under certain circumstances ("right to be forgotten").
- Right to Restriction of Processing (Article 18): You have the right to request restriction of processing of your personal data under certain conditions.
- Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit such data to another controller.
- Right to Object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country of residence.
9.3. Rights Under CCPA (California Residents). If you are a California resident, you may have certain rights under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), including: (a) the right to know what personal information is collected, used, shared, or sold; (b) the right to delete personal information held by us; (c) the right to opt out of the sale or sharing of personal information; and (d) the right to non-discrimination for exercising your privacy rights. To exercise these rights, please contact us using the information provided below. We do not sell personal information as defined under the CCPA/CPRA.
10. Data Retention and Account Deletion
10.1. Account Data. If you create an account on the Site, your personal information (including profile data, bookmarks, reading progress, achievements, and preferences) will be retained for as long as your account remains active. You have the right to delete your account and all associated data at any time directly from your Profile Settings page.
10.2. Account Deletion Process. To delete your account and all personal data:
- Navigate to your Profile Settings (sign in required)
- Scroll to the "Data & Privacy" section
- Click "Delete Account" and follow the confirmation steps
- Type "DELETE" in capital letters to confirm permanent deletion
- All your data will be immediately and permanently removed from our systems
10.3. What Gets Deleted. When you delete your account, we permanently remove: (a) your Firebase authentication account; (b) your profile information; (c) all bookmarks and reading progress; (d) achievements and gamification data; (e) all preferences and settings; and (f) any other personal data associated with your account. This action cannot be undone.
10.4. Analytics Data. Analytics data is retained in accordance with our Google Analytics 4 configuration settings and Google's default data retention policies. We have configured our GA4 property to retain user-level and event-level data for the standard retention period. Analytics data is anonymized and cannot be linked back to individual accounts.
10.5. Contact Form Data. Contact form submissions (name, email, message content) are retained only as long as necessary to respond to your inquiry and for a reasonable period thereafter for our records. You may request deletion of your contact information at any time.
10.6. Local Storage Data. Local storage data (theme preferences, consent choices, language preferences) is stored in your browser and persists until you manually clear it or clear your browser data.
11. Data Security
11.1. We implement reasonable and appropriate administrative, technical, and physical security measures designed to protect the information we collect and maintain against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to: (a) SSL/TLS encryption for all data transmitted between your browser and our servers; (b) secure hosting infrastructure; and (c) limited access to personal information on a need-to-know basis.
11.2. Notwithstanding the foregoing, no method of transmission over the Internet, no method of electronic storage, and no security system is impenetrable or can be guaranteed to be 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. Any transmission of personal information is at your own risk.
12. Children's Privacy
12.1. The Site is not directed to, and we do not knowingly collect personal information from, children under the age of thirteen (13) years, or under the age of sixteen (16) in jurisdictions where the GDPR applies. If we become aware that we have inadvertently collected personal information from a child under the applicable age, we will take reasonable steps to promptly delete such information from our records.
12.2. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us immediately so that we can take appropriate action.
13. Third-Party Privacy Practices
13.1. This Privacy Policy applies solely to information collected by our Site. The Site may contain links to or integrations with third-party websites, services, or applications that are not operated or controlled by us. We are not responsible for the privacy practices or the content of such third-party services.
13.2. We encourage you to review the privacy policies and terms of service of any third-party service that you access through or in connection with our Site, including but not limited to Google's Privacy Policy, Cloudflare's Privacy Policy, and any other third-party service referenced herein.
14. Changes to This Privacy Policy
14.1. We reserve the right to modify, amend, or update this Privacy Policy at any time, in our sole discretion. Any changes to this Policy will be effective immediately upon posting of the revised Policy on the Site. The "Last updated" date at the top of this page indicates when the most recent revisions were made.
14.2. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Site following the posting of any changes constitutes your acceptance of such changes.
14.3. In the event of material changes that significantly affect your rights, we will endeavor to provide prominent notice on the Site or through other means prior to the change becoming effective.
15. Contact Us
15.1. If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your rights under applicable data protection laws, please contact us using the contact form provided below on this page, or through the contact information available on the Site.
15.2. For GDPR-related inquiries, please include "Data Protection Inquiry" in the subject or body of your message to ensure timely processing.
By continuing to access or use the Site, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.