Legal

Privacy Policy

The short version: this is a static personal site with no accounts and no advertising. Google Analytics runs only if you allow it, and the tools never send your data anywhere regardless.

Effective 12 August 2026

At a glance

  • Analytics only if you allow it. Google Analytics is not loaded at all unless you press Allow, so declining means no analytics cookies and no request to Google.
  • No advertising and no data is sold or shared with brokers.
  • No accounts, logins, or newsletters.
  • No fingerprinting, and nothing sold. A couple of items of localStorage remember your theme and your analytics choice, and never leave your device.
  • The tools run entirely in your browser. Anything you paste into the subnet calculator, JWT decoder, Base64 or YAML converters is processed locally and is never uploaded.

Who runs this site

This website is a personal portfolio and resume operated by Suraj Kumar, based in Gurugram, India. Questions about this policy can go to surajkumar.devp@gmail.com.

What this site stores on your device

The site itself sets no cookies. It stores these values in your browser’s localStorage, and Google Analytics sets cookies of its own only once you have allowed it:

Key Purpose Retention
theme Remembers whether you chose the light or dark theme. Until you clear your browser storage.
analytics-consent Remembers whether you allowed or declined analytics, so you are asked once. Until you clear your browser storage.
_ga, _ga_* Google Analytics cookies that count a returning browser as one visitor. Set by Google, and only after you press Allow. Up to 2 years, or until you clear your cookies.

The localStorage values are read and written only by your own browser. They are not transmitted to me or to anyone else. Clearing your site data removes them, and the site falls back to your operating system's colour preference.

Analytics

This site uses Google Analytics 4 to count visits and see which pages and tools people actually use. It is switched off by default: the Google script is not downloaded, and no analytics cookie is set, unless you press Allow on the notice. Declining, or simply ignoring it, means no contact with Google at all.

If you do allow it, Google receives the pages you visit, an approximate location derived from a truncated IP address, and general device and browser information. It does not receive your name or your email, and I have not enabled advertising features, Google Signals or data sharing with other Google products. Google is the data processor for this and acts under its own privacy policy.

Changing your mind is a matter of clearing this site's data in your browser, which removes the stored choice and brings the notice back. Browser do-not-track and the Google Analytics opt-out add-on are both honoured, and blocking the script at the network level works exactly as you would expect.

None of this applies to the tools themselves. What you paste into the subnet calculator, the JWT decoder or the PCAP analyzer is never sent anywhere, with or without analytics — the section below is unaffected by any of this.

The DevOps tools

Every tool on the tools page is implemented in client-side JavaScript that ships with the page. There is no backend and no API call behind them. Network addresses, tokens, YAML, JSON, cron expressions and any other input you provide are parsed in memory in your browser, are not written to storage, and are discarded when you close or reload the tab.

A practical note, not a legal one: the JWT decoder shows you the contents of a token without verifying its signature, and it never sends the token anywhere. Even so, treat production credentials with care — you should be cautious about pasting live secrets into any web page, including this one.

Hosting and server logs

The site is hosted on GitHub Pages. Like any web host, GitHub's infrastructure processes technical information when it serves a page to you — including your IP address, user agent and the URL requested — for delivery, security and abuse prevention. I do not have access to these logs and cannot identify individual visitors. GitHub's handling of that data is governed by the GitHub Privacy Statement.

Third-party content

Some blog posts embed images hosted by third parties such as Unsplash, Pixabay and GitHub's content CDN. When your browser loads one of those images, it makes a request to that provider, which necessarily reveals your IP address and user agent to them. I have no control over and no access to what those providers log.

The site also links out to LinkedIn, GitHub and other external sites. Once you follow such a link, that site's own privacy policy applies — not this one.

The contact form

The form on the contact page does not submit anything to a server. It assembles the text you typed into a mailto: link and hands it to your own email client, where you remain in control and can edit or discard it before sending. No copy is kept by this site.

If you do choose to email, call or message me, I will hold that correspondence — your name, contact details and whatever you wrote — for as long as needed to reply and to keep a record of the conversation. I do not add correspondents to mailing lists.

Your rights

Because this site collects no personal data itself, there is generally nothing for me to access, correct or delete. Where I do hold information you sent me directly by email, you can ask me to provide a copy of it or erase it by writing to surajkumar.devp@gmail.com, and I will act on the request. Depending on where you live, data protection law — such as the GDPR in the EU/UK or India's Digital Personal Data Protection Act — may give you additional rights, including the right to complain to your national supervisory authority.

Children

This site is aimed at working professionals. It is not directed at children and knowingly collects no information from them.

Changes to this policy

If the site starts doing something that affects your privacy — adding analytics or comments, for example — this page will be updated and the effective date above changed before or at the same time as the change goes live. The full revision history of this page is public in the site's Git repository.


This is a plain-language policy for a personal, non-commercial website, written to describe accurately what the site does. It is not legal advice.