Privacy Policy & Data Protection Notice
This Privacy Policy describes how Maurya Om Amarjit (“Operator”, “we”, “us”, or “our”), operating as an individual website operator in Lucknow, Uttar Pradesh, India, collects, processes, stores, and protects personal data when you access or interact with iExploreYou at https://iexploreyou.online.
🌱Our Architectural Privacy Commitments
1. Statutory Framework & DPDP Act Commencement Schedule
iExploreYou operates under the substantive laws of the Republic of India. Under the Digital Personal Data Protection Act, 2023 (DPDP Act):
- Data Fiduciary: Maurya Om Amarjit, Individual Operator, Lucknow, Uttar Pradesh, India. Contact:
ommaurya638@gmail.com. - Classification: Standard Data Fiduciary. The platform is an independent, non-commercial service and is not designated as a Significant Data Fiduciary (SDF).
- Commencement Schedule (G.S.R. 843(E)): By Gazette Notification G.S.R. 843(E) dated 13 November 2025, the Central Government notified the phased commencement roadmap for the DPDP Act. While preliminary and institutional provisions commenced in November 2025, substantive obligations (including mandatory notice formats under Section 5, Consent Manager framework under Section 6, and Data Principal rights under Sections 11–14) are subject to an 18-month transition runway ending on 13 May 2027.
- Voluntary Early Adoption: iExploreYou does not wait for mandatory enforcement deadlines; we proactively and voluntarily adhere to core data minimization, purpose limitation, storage limitation, and user erasure principles today.
2. Categories of Data Processed & Retention Schedules
A. Individual Self-Discovery Assessments & Daily Questions
Your answer choices, calculated personality dimensions, archetype results, and Daily Question reflections are computed and stored strictly on your device in client browser storage (sessionStorage and localStorage). They are never transmitted to our backend database or stored on our servers.
B. “How Well Do You Know Me?” Guessing Games
When creating a game, the server stores your chosen nickname, your 12 question answers, an unguessable token, and a creator verification key. When your friend plays, their guesser nickname and choices are recorded to display the match score. Games are retained for 90 days from creation or until you revoke them.
C. Memory Capsules
Capsules store a creator nickname, title, confidential written message, and target reveal date. Unopened capsules remain sealed until the designated timestamp. Capsules are retained until the reveal date plus 30 days, or immediately deleted upon creator revocation.
D. Technical Telemetry & Abuse Prevention
To prevent distributed denial of service (DDoS) and brute-force abuse, our reverse proxy and edge network (Vercel) log standard HTTP headers (IP address, user agent, timestamp). In-memory rate limiters use sliding windows that automatically flush within 15–60 minutes.
3. Lawful Grounds for Processing
We process digital personal data under the following legal bases:
- Consent (Section 6, DPDP Act 2023): Freely given, specific, and informed affirmative action when you create a game link or submit answers.
- Contractual / Feature Necessity: Processing required to deliver the interactive experience you explicitly triggered (e.g., scoring responses).
- Security & Abuse Defense: Legitimate interest in defending server infrastructure against automated spam and denial-of-service attacks.
4. Sub-Processors & Hosting Architecture
We rely on industry-standard cloud providers who process data strictly on our instructions:
- Turso (ChiselStrike, Inc.): Serverless libSQL database. Data centers in AWS / Fly.io regions (Frankfurt EU / US-East). Database files are encrypted at rest with AES-256 and transmitted over TLS 1.3.
- Vercel, Inc.: Application edge hosting, global CDN, and DDoS mitigation. Certified under ISO 27001 and SOC 2 Type II.
5. Age Policy & Protection of Minors (18+ Policy)
iExploreYou is strictly intended for individuals who are 18 years of age or older. In compliance with Section 9 of the DPDP Act, 2023, we do not knowingly process personal data of children, nor do we engage in tracking or behavioral monitoring directed at minors.
Because we intentionally practice extreme data minimization, we do not require users to submit national identity cards (such as Aadhaar). If you are a parent or guardian and discover that a minor under your care has submitted personal data without authorization, please contact us at ommaurya638@gmail.com for immediate deletion.
6. User Rights & Voluntary Privacy Commitments
While the formal statutory rights framework under Sections 11–14 of the DPDP Act 2023 is progressing through its 18-month phased implementation schedule leading to 13 May 2027, iExploreYou proactively honors universal privacy principles:
7. Cookies and Browser Storage
iExploreYou uses only strictly essential session cookies:
iey_gc_<token>: Verifies creator permissions for an active guessing game. Set asHttpOnly; Secure; SameSite=Lax.iey_gg_<token>: Records guesser completion to prevent multiple redundant submissions.
We use zero advertising cookies, zero third-party cross-site trackers, and zero behavioral measurement beacons. Read our full Cookie Notice.
8. Operator & Grievance Contact
In compliance with Rule 3(2) of the Information Technology (Intermediary Guidelines) Rules, 2021, you may address inquiries, takedown requests, or privacy concerns directly to:
Operator & Grievance Contact: Maurya Om Amarjit
Capacity: Individual Website Operator & Sole Controller
Location: Lucknow, Uttar Pradesh, India
Official Contact Email: ommaurya638@gmail.com
Contact Page: Direct Email Composer & Instructions
All communications are personally reviewed by the operator. Best efforts are made to acknowledge messages within 24–48 business hours.