Skip to content

Privacy Policy

1. Overview

Controller
The controller responsible for data processing on this website is Navneet Singh Arora. Full contact details are in the Imprint.

Scope
This policy covers navneetsingharora.com only — not the third-party sites this site links to (LinkedIn, GitHub, Xing, npm, n8n.io, Medium, etc.), which have their own privacy policies.

2. Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure of your data (“right to be forgotten”) (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing based on legitimate interest (Art. 21)
  • Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal
  • Lodge a complaint with a supervisory authority — in Germany, typically the data protection authority of the state (Land) where you live, work, or where the alleged infringement occurred

To exercise any of these rights, contact aroranavneetsingh.de@gmail.com.

3. Hosting — Vercel

This site is hosted by Vercel Inc. (United States). When you visit, Vercel’s infrastructure automatically processes technical data necessary to deliver the page: IP address, browser type and version, operating system, referrer URL, pages visited, and timestamp — stored temporarily in server logs.

  • Purpose: delivering the website reliably and securely, diagnosing technical issues
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a functional, secure website)
  • Retention: Vercel’s standard log retention (typically a few days to weeks)
  • US transfer: Vercel processes data in the United States. Transfers are covered by Vercel’s Data Processing Addendum and EU Standard Contractual Clauses. See Vercel’s Privacy Policy.

Vercel Analytics and Speed Insights run on this site to measure page views and load performance. Both are configured in a privacy-friendly mode: no cookies are set, and no cross-site tracking identifiers are used. Aggregated, anonymized metrics only.

  • Purpose: understanding traffic patterns and page performance to improve the site
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

4. Contact form — Web3Forms

The contact form on the Contact page submits your name, email address, and message to Web3Forms (United States), a third-party service that relays the submission to my inbox by email. Web3Forms does not require an account and does not use the data for any purpose beyond this relay.

  • Data collected: name, email address, message content
  • Purpose: responding to your inquiry
  • Legal basis: Art. 6(1)(a) GDPR (your explicit consent, given via the checkbox before submission) and Art. 6(1)(f) (legitimate interest in responding to inquiries)
  • Retention: submissions remain in my email inbox until no longer needed for the purpose of correspondence, then deleted
  • US transfer: Web3Forms operates in the United States. See Web3Forms’ Privacy Policy
  • A hidden honeypot field is used to filter automated spam submissions; it does not collect data about legitimate visitors.

5. Blog banner images — Medium

Some blog post banner images are hosted on miro.medium.com (Medium’s image CDN), since these posts are also published on Medium. Loading a post with a Medium-hosted banner exposes your IP address and user agent to Medium.

  • Purpose: displaying post banner images
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

6. Local storage

This site stores a small number of preferences in your browser’s local storage — your light/dark theme choice and your preferred view mode on the projects page. This data stays on your device, is never transmitted to me or any third party, and is not a cookie in the legal sense. You can clear it at any time via your browser settings.

7. Server log files

Beyond what Vercel processes for hosting (Section 3), no additional server-side logging is performed by me directly.

8. Data not collected

This site does not use advertising cookies, does not run cross-site tracking pixels, does not sell data to third parties, and does not build user profiles. The phone number field was removed from the contact form in 2026 as it served no purpose. Technology and social icons, and GitHub contribution data, are fetched at build time and served as part of the static site — your browser does not request them from any third party.

9. Changes to this policy

This policy may be updated as the site’s features or third-party services change. The version in effect is always the one published at this URL.