Privacy Policy
sant.al isn't open for sign-ups yet. Section 2 explains what happens on the homepage today. The rest explains what will happen when accounts open, so you can read it before you decide to join.
The short version
- We collect only what's needed to run your page and keep sant.al safe.
- We don't sell your data, show ads or track you across other websites.
- Page stats are counted without cookies and without storing visitors' IP addresses.
- You can see, correct, download or delete your data at any time.
- This notice is available in English, and you can ask for it in Santali or any other language listed in the Eighth Schedule of the Constitution of India.
1. Who's responsible for your data
sant.al is made by Adiva.si Lab and operated by [LEGAL NAME OF OPERATOR], [POSTAL ADDRESS], India ("we", "us"). We are the Data Fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the DPDP Rules, 2025. We also follow the Information Technology Act, 2000 and the rules made under it.
2. Right now, before launch
Today, the sant.al homepage is an information page. We don't run any servers that collect your personal data.
- The name box. When you type a name, it's checked only inside your browser. It isn't sent to us or stored.
- Hosting. The homepage is hosted on GitHub Pages. Like any web host, GitHub may log technical data such as your IP address to keep its service secure. See GitHub's privacy statement.
- Fonts. Our fonts load from Google Fonts, so your browser connects to Google, which receives your IP address. See Google's privacy policy.
- Telegram (optional). If we turn on reserving a name through Telegram and you choose it, you'll be taken to Telegram, where Telegram's privacy policy applies.
3. What we'll collect when accounts open, and why
We process your data on the basis of your consent, which you give when you create an account. We also process it for uses the DPDP Act allows without consent, such as meeting legal obligations and responding to orders from authorities.
| What | Why |
|---|---|
| Sign-in details: your email address; your Google account ID, name and profile photo (if you use Google); your phone number (if you use phone); your Telegram ID and username (if you use Telegram) | To create your account, sign you in, link several sign-in methods to one account, prevent duplicate and banned accounts, and contact you about your account |
| Your page: your address, display name, bio, photo, links, theme and page settings | To publish your page. This is public by design, so anyone with the link can see it |
| Safety data: results of automated checks on text and photos, reports, moderation decisions, strikes, and fingerprints (hashes) of removed images | To keep sant.al free of hate, sexual content, morphed images and abuse, to stop removed images being re-uploaded, and to meet our legal duties |
| Security logs: IP address, device and browser type, and times of sign-ins and important account actions | To protect accounts, detect abuse and investigate security incidents |
| Messages: what you send us by email or through report and grievance forms | To answer you and handle complaints |
| Your page's stats: totals of visits and link clicks (see section 4) | To show you how your page is doing. Only you can see your stats |
We don't ask for sensitive details such as your caste, religion, health or financial information. Please don't put anything on your public page that you don't want everyone to see.
4. People who visit sant.al pages
When someone visits a sant.al page, we count the visit using Umami, a privacy-friendly, open-source analytics tool that we run on our own server.
- It uses no cookies and doesn't follow visitors across websites.
- It doesn't store visitors' IP addresses. To count unique visitors, it creates a one-way code from technical details using a secret that changes regularly, so a visitor can't be identified or tracked over time.
- From each visit it keeps only: the page visited, which links were clicked, the referring site (such as Instagram), the country, and the device type (phone or computer).
- Page owners see only totals for their own page, never details about individual visitors.
Our servers also keep short-lived technical logs to protect sant.al from attacks (section 9).
5. What we never do
- Sell or rent your personal data.
- Show ads or use your data for advertising.
- Track you or your visitors across other websites.
- Make decisions about you that have legal effects based only on automated processing. Automated checks can stop content from being published, but you can always ask a person to review the decision.
8. Data stored outside India
Some of our service providers may store or process data outside India. We do this only as the DPDP Act and DPDP Rules allow, and never to a country the Government of India has restricted. We expect our own servers to be in [COUNTRY].
9. How long we keep data
| Data | How long |
|---|---|
| Your public page | Until you delete it or your account. It goes offline immediately. |
| Account and sign-in details | While your account exists, then 180 days after it's closed, as Indian IT rules require. |
| Content removed for breaking rules | At least 180 days, or longer if an authority or court asks, as the law requires. |
| Fingerprints (hashes) of removed images | As long as needed to block re-uploads. They can't be turned back into the image. |
| Security logs | One year, as the DPDP Rules require, then deleted. |
| Page stats | While your page exists. Deleted with your account. |
| Messages and complaints | Up to [2] years after the matter is closed. |
If you don't sign in for [3] years, we'll email you. If you still don't sign in, we'll delete your account 48 hours after that reminder.
10. Security & data breaches
We protect your data with reasonable security safeguards. These include encryption in transit (HTTPS), encryption of sensitive fields at rest, strict access controls, logging and monitoring, regular updates, and backups. Only the people who run sant.al can access personal data, and only when needed.
If a breach affects your personal data, we'll tell you without delay: what happened, what it means for you, what we're doing about it, and what you can do. We'll also report it to the Data Protection Board of India within the timelines in the DPDP Rules.
11. Children
sant.al accounts are only for people aged 18 or over. We don't knowingly collect personal data from children. If we learn that an account belongs to someone under 18, we'll delete it and the data connected to it. Parents or guardians can contact us at the address in section 1.
12. Your rights
Under the DPDP Act you have the right to:
- Access: get a summary of the personal data we hold about you and how we use it, and who we've shared it with.
- Correct, complete or update your data. Most of it you can change yourself in your dashboard.
- Erasure: ask us to delete your data, or delete your account yourself in Settings.
- Withdraw consent at any time, as easily as you gave it. We'll then stop processing your data, except where the law requires us to keep it. Withdrawing consent means we can no longer run your page.
- Nominate someone to exercise these rights for you if you die or can't act for yourself.
- Complain to us and get an answer (section 13).
You can also download a copy of your page and data from Settings. To use any right, write to the privacy contact in section 1. We may need to confirm it's really you. We'll respond as soon as we can, and in any case within the time the DPDP Rules allow.
13. Questions & complaints
Write to our privacy contact (section 1) first. We'll respond within the time the DPDP Rules allow, and usually much sooner. For complaints about content on sant.al, contact our Grievance Officer (see Terms, section 8).
If you're not satisfied with our response, you can complain to the Data Protection Board of India.
If you live outside India, you may also have rights under your local law, and we'll respect them.
14. Changes to this policy
If we change how we use your data, we'll update this page. If the change is important, we'll tell you by email or in the app before it takes effect and ask for your consent again where the law requires. The date at the top shows the latest version.