This policy explains what personal information I collect, why, who I share it with and the choices you have. "I", "me" and "my" mean Ujjwal Kumar Rai, who runs these services as an individual and is responsible for your information. "You" means anyone who visits or uses them.
It covers:
- The ujjwal.fyi sites: blog.ujjwal.fyi, tech.ujjwal.fyi and ujjwal.fyi.
- Sign in with Google on any app shown as "Ujjwal" on Google's sign-in screen.
- Twiligent, the social media analytics and publishing dashboard I run at twiligent.ujjwal.fyi.
I do not sell your personal information, I do not use it for advertising, and I do not use it to train AI models.
Information I collect
When you read the sites
- Newsletter email. If you subscribe, I store your email address and the time you subscribed. Nothing else is attached to it.
- Visit statistics. Cloudflare Web Analytics counts page views, the page you came from, your browser and device type and your country. It uses no cookies and does not identify you or follow you across other sites.
- Server logs. Like every website, the servers receive your IP address and browser details with each request. Cloudflare, which hosts the sites, keeps these logs briefly for security and troubleshooting.
- Theme choice. Your light or dark preference is kept in your own browser's local storage. It never reaches me.
The sites have no comments, accounts or contact forms, and search terms are not stored.
When you sign in with Google
Google shares your name, email address, profile picture and a Google account ID. I ask only for these basic profile details, never for access to your Gmail, Drive, contacts or other Google data.
When you use Twiligent
- Your account: your email address and, if you do not use Google, a password stored only as a secure hash.
- Accounts you connect:
- YouTube channels: public channel and video statistics.
- Instagram professional accounts: your profile, posts and their insights, through Instagram's official API, plus an access token so Twiligent can act on your behalf.
- Reddit profiles: your username and the browser session cookie you paste in, used to read your profile and posts.
- Content you publish: the photos and videos you upload, captions, tagged people, collaborators, locations and the times you schedule.
- Tracked content: the links, labels and categories you add, view counts you enter and screenshots you upload.
Access tokens and cookies are kept on the server and are never sent back to any browser, including yours.
How I use it
- To run the services: sign you in, show your analytics, publish and schedule your posts, and keep connected accounts working.
- To send the newsletter: new posts from the blog, and nothing else.
- To keep things secure: prevent abuse, investigate problems and protect you, me and others.
- To understand reach: which posts and pages people read, using the cookie-free statistics above.
- To meet legal obligations: when the law requires it.
Google user data
Twiligent's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements. Information from Google is used only to sign you in and to show your own data back to you. It is not shared or sold, used for advertising, or read by people except with your permission, for security, or to comply with the law.
Who I share it with
I share information only with services that help me run things, and only what each one needs:
- Cloudflare: hosting, security, analytics and the blog's database.
- Supabase: Twiligent's sign-in and database.
- Cloudinary: stores media you upload for publishing, because Instagram fetches files from a public link.
- Upstash: a short-lived cache of analytics results.
- Google, Meta and Reddit: when you sign in with Google or connect a YouTube, Instagram or Reddit account, Twiligent sends requests to them on your behalf.
I may also disclose information if the law requires it, or to protect rights, safety or property. Posts on the blog can embed content from X, YouTube, Vimeo or CodePen. When a page shows such an embed, your browser contacts that service directly, and its own privacy policy applies.
How long I keep it
- Newsletter emails: until you ask to be removed.
- Twiligent data: until you remove it or delete your account. Removing a connected account deletes its token or cookie straight away.
- Uploaded media: kept in Cloudinary until it is deleted.
- Server logs and statistics: kept for the periods Cloudflare sets.
Your choices and rights
You can ask me at any time to:
- tell you what information I hold about you and send you a copy
- correct it
- delete it, including your whole Twiligent account or your newsletter subscription
- stop or limit using it
Email ujjwal@aevrin.net from the address involved, so I can confirm the request is yours. I aim to reply within 30 days. You can also disconnect Twiligent from your Google account at myaccount.google.com/connections, and from Instagram under Settings, Website permissions, Apps and websites.
If you are in the European Economic Area or the United Kingdom
Data protection law requires a legal reason for each use of your information. Mine are:
- Contract: running Twiligent and signing you in, because you asked to use them.
- Consent: the newsletter. You can withdraw consent at any time.
- Legitimate interests: security, server logs and cookie-free statistics, which keep the sites safe and working without identifying you.
- Legal obligation: where the law requires me to keep or disclose information.
You also have the right to receive your data in a portable format, to object to processing based on legitimate interests, and to complain to your local data protection authority. I would appreciate the chance to sort out any concern first.
Where information is stored
The services above store and process information in the United States and other countries. Where information leaves the European Economic Area or the United Kingdom, those providers protect it with the safeguards the law requires, such as standard contractual clauses.
Security
Connections are encrypted, databases block direct public access, and secrets stay on the server. No system is perfectly secure, so I cannot promise that information will never be exposed. If a breach affects you, I will tell you as the law requires.
Children
These services are not meant for anyone under 16, and I do not knowingly collect their information. If you believe a child has given me information, email me and I will delete it.
Changes to this policy
When I change this policy, I update the date at the top. If a change materially affects how I use your information, I will say so on the sites or in Twiligent before it takes effect.
Contact
For questions about this policy or your information, email ujjwal@aevrin.net.