Privacy Policy
Last updated
This policy explains what NiharDaily collects when you read, comment on, or subscribe to this site, why we collect it, and what you can ask us to do about it. We have written it to describe what the site actually does rather than to cover every theoretical possibility.
1. Who we are
NiharDaily is published by Nihar Ranjan Das, an individual publisher based in India. For the purposes of data protection law, Nihar Ranjan Das is the data controller for this site. You can reach us at niharranjandasmu@gmail.com.
2. What we collect, and why
These are the things you can hand us, and what happens to each.
- Account details.Readers sign in with Google. We receive your name, email address, and profile image from Google, and our sign-in library stores the tokens Google returns when you link your account. We do not use those tokens to act on your behalf. The email-and-password sign-in is the publisher’s own admin account, not something readers can create; that password is held only as a bcrypt hash, which we cannot read back. An account exists so you can comment and save highlights.
- Comments and highlights. The text you submit, linked to your account. Your first comment is held for moderation before it appears; once we have approved you, your later comments appear straight away. Anything you post publicly is, by design, public.
- Newsletter subscriptions. Your email address, plus a confirmation token and an unsubscribe token. We use double opt-in, so the address does nothing until you confirm it. We use it only to send the newsletter. We do not sell, rent, or share subscriber lists.
- Push notifications.If you accept your browser’s notification prompt, we store the push endpoint and keys your browser issues. This identifies a browser, not a person, and it lets us send you a notification when we publish. Revoking notification permission in your browser ends it.
3. Likes and read counts
Likes and read counts do not require an account and do not identify you. They rely on a cookie named bid holding a randomly generated identifier with nothing personal in it. The cookie is HTTP-only, lasts a year, and exists so that refreshing an article does not count it twice and so the site remembers which posts you liked. When you like a post, that identifier is written to our database next to the post, so our records show which posts a given device has liked. It points to a device, not to a name. Clearing your cookies resets both.
4. IP addresses
We use your IP address to limit request rates and to stop automated traffic from inflating read counts. It is held in the server’s memory for up to 24 hours and is never written to our database. We do not build profiles from it, and we cannot look up what you read.
6. Advertising and Google AdSense
This site is supported by advertising served through Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
Google’s use of advertising cookies, including the DoubleClick DART cookie, enables it and its partners to serve ads to you based on your visits to this site and other sites on the internet.
We ask before any of this happens. Until you answer the cookie banner, the AdSense script does not load at all. If you decline, we ask Google to serve only non-personalised ads, which use cookies for frequency capping and measurement rather than for profiling. You can change your answer at any time by clearing this site’s data in your browser, which brings the banner back.
You can also control this at Google’s end:
- Opt out of personalised advertising at google.com/settings/ads.
- Read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.
- Opt out of third-party vendors’ cookies at aboutads.info/choices.
7. Who else handles your data
We keep this list short on purpose. Each of these companies processes data on our behalf under its own privacy policy.
- Google — advertising (AdSense) and sign-in with Google.
- Resend — delivers newsletter email.
- Vercel — hosts the site and keeps short-lived request logs.
- MongoDB Atlas — stores the database described above.
- Vercel Blob — stores images used in articles.
8. Your rights
Whether you are covered by the EU and UK GDPR, by India’s Digital Personal Data Protection Act, 2023, or by neither, we will honour the same requests: ask us what we hold about you, ask us to correct it, ask us to delete it, or withdraw a consent you previously gave. Email niharranjandasmu@gmail.com and we will respond within 30 days.
Two things need no email at all. Every newsletter carries a one-click unsubscribe link, and clearing this site’s data in your browser removes the bid cookie and your stored consent answer.
9. How long we keep things
Accounts, comments, and highlights are kept until you ask us to delete them. Subscriber records are kept until you unsubscribe; an address that never confirms the double opt-in stays on record until you ask us to delete it. Rate-limiting data lives in server memory for up to 24 hours and is never persisted.
10. Children
This site is not directed at children, and we do not knowingly create accounts for or collect data from them. If you believe a child has given us personal data, email us and we will delete it.
11. Security
The site is served over HTTPS, passwords are stored only as bcrypt hashes, and session and device cookies are HTTP-only so page scripts cannot read them. No system is perfectly secure, and we will not pretend otherwise — but we hold as little as we can, which is the part that actually limits the damage.
12. Changes to this policy
When this policy changes, the “Last updated” date at the top changes with it. Continuing to use the site after a change means you accept the revised policy.
13. Contact
Nihar Ranjan Das — niharranjandasmu@gmail.com.