www.paulkreations.com
Privacy Policy
Legal

Paul Kreations

Privacy Policy

Last updated: October 29, 2026

01Who we are and what this covers

Paul Kreations is a solo app and web studio run by Debapriyo Paul in Kolkata, India. This policy explains how the website at paulkreations.com — including the blog, the contact form and blog comments — handles personal data.

Our apps have their own privacy policies: Where Is My Money? and the other apps listed on this site. Those policies, not this one, govern the apps and the /wimm pages.

For the data described here, Paul Kreations is the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the "controller" under comparable laws.

02What we collect

You do not need an account to read this website. We collect only what is below.

  • Contact form. The details you type in (such as your name, email address and message) so we can reply.
  • Blog comments. A name of your choice, your comment text and, only if you choose to give it, an email address. The email is optional, is never shown on the site and is used only so we can reply to you about your comment. Once a comment is approved, the name and text are public on the post.
  • Likes, dislikes and views. Each post keeps running totals. To count one view or one reaction per visitor, your browser stores a small cookie (see the Cookie Policy). The totals are not linked to your identity. Likes and dislikes on individual comments work the same way.
  • Currency display. Some guides show amounts in your local currency. We work out your country from your request (the hosting provider supplies it) to pick a default currency; we do not store it. If you pick a currency yourself, your browser remembers that choice on your device only.
  • Technical data. When you load a page, our hosting and security providers receive standard request data such as your IP address, browser, device type and the page you asked for. Vercel Web Analytics and Speed Insights turn this into aggregated statistics without using cookies.
  • Error monitoring. Sentry receives diagnostic information when something breaks, and records a sample of visits (and every visit where an error occurs) so we can see what led to the error. Text and form inputs are masked by default.
  • Bot checks. Cloudflare Turnstile runs on the contact form and the blog comment form to tell people from programs.
  • Advertising data. Our blog pages show, or may show, ads served by Google AdSense. Google and its advertising partners may use cookies and similar identifiers, and receive technical data such as your IP address, browser and approximate location, to show and measure ads. See section 05.

Staff who sign in to our admin area also provide an email address for the sign-in link. This does not apply to visitors.

03Why we use it

  • To reply to your messages and requests.
  • To show, review and moderate comments, and to stop spam.
  • To run, secure and improve the website, and fix errors.
  • To understand, in aggregate, which pages are read and how fast they load.
  • To show advertising on the blog, which helps pay for the site.
  • To meet legal obligations and protect our rights.

We do not sell your personal data. We do not use your messages or comments for advertising.

04Who processes data for us

We use the providers below to run the website. They process data on our behalf, or — in Google's case for ads — under their own policies.

Service providers used by the website
ProviderWhat it doesData involved
VercelHosting, Web Analytics, Speed InsightsRequest data (IP address, browser, page); aggregated, cookie-free page statistics
SupabaseDatabase for blog posts, comments, counters and staff accountsComment name, text and optional email; reaction and view totals; staff email addresses
CloudflareDNS, security, Turnstile bot checksTechnical request data and challenge signals
ResendSends email from the contact form and staff sign-inYour name, email address and message
SentryError and performance monitoring, sampled session replaysTechnical diagnostics, page address, masked interaction traces
Google AdSenseAds on blog pagesAd cookies and identifiers, browser, device and approximate location (see section 05)

Some providers handle data outside India. Where they do, we rely on their published data-protection terms.

05Advertising

Ads appear only on blog posts, never inside the Where Is My Money? app pages, our forms or the admin area. They are provided by Google AdSense. Google uses cookies and similar technology to serve ads based on your visits to this and other websites, and to measure them.

We do not choose who sees which ad and we do not endorse advertised products. See our Disclaimer.

06Cookies

The cookies and browser storage this website uses are listed, with purpose and lifetime, in our Cookie Policy.

07How long we keep it

  • Contact messages: as long as needed to deal with your request and for a reasonable period afterwards, then deleted.
  • Comments: approved comments stay on the post until we remove them or you ask us to; an email address you gave stays private and is deleted with the comment. Comments we do not approve may be deleted at any time.
  • Reaction and view totals: kept with the post; they are not personal data.
  • Analytics, monitoring and ad data: kept by the providers under their own retention periods.

08Your choices and rights

You can ask us to tell you what personal data we hold about you, correct it, delete it, or withdraw consent you gave. To have a comment removed, email us with a link to the post and the name you used. If you are in the EEA or UK you also have the rights set out in the GDPR, including to complain to your data-protection authority.

Write to support@paulkreations.com. We aim to reply within 30 days.

09Grievance Officer (India)

10Children

This website is not directed at children under 18 and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.

11Security

Data is transmitted over HTTPS, stored with reputable providers, and access to the admin area is limited to signed-in staff. No online service can promise absolute security.

12Changes to this policy

When we change this policy we update the date at the top. If a change is significant — for example a new kind of data or a new provider — we will say so on this page.

13Contact

Questions about this policy: support@paulkreations.com.