Legal
Privacy Policy
Last updated:
This is a short privacy notice for the personal shakthi.xyz website. It’s deliberately brief because the site itself doesn’t do much with personal data. See the one-liner at the end for where the meatier disclosure lives.
1. Who runs this site
Shakthi Prasad Kizhikki Thara, based in Berlin, Germany. Full contact details on the Impressum page. For data questions, email hello@shakthi.xyz.
2. What we collect on this site
2.1 Analytics & performance telemetry
We use Vercel Analytics + Speed Insights to see how pages perform (page views, route latencies, Web Vitals). Per Vercel’s documentation these are cookie-less and do not identify individual visitors; readings are aggregated into anonymous, IP-anonymised metrics. No advertising network, no cross-site tracking, no Google Analytics.
Legal basis: legitimate interest in understanding aggregate site usage (Art. 6(1)(f) GDPR). If you’d prefer not to contribute even to the anonymous aggregate, a network-level tracker blocker (uBlock, Ghostery, or your browser’s built-in) will stop the telemetry beacon at the source.
2.2 Server access logs
Our hosting provider (Vercel) keeps standard HTTP access logs (request path, timestamp, IP address, and user-agent string) as an operational + security measure. Retention follows Vercel’s default (roughly 30 days for detailed request logs). We do not aggregate or export these logs for any secondary purpose.
Legal basis: legitimate interest in the security + operation of the service (Art. 6(1)(f) GDPR).
3. What we don’t do here
The personal site has no accounts, no signup forms, no newsletter, no comment system, and sets no analytics or advertising cookies. A single owner-only session cookie (admin_session) exists but is only ever set when the site’s owner signs into the private CMS at /admin; it is not set for regular visitors.
4. Mixva is a separate story
The Mixva macOS beta — account signups, licence tokens, beta waiting list, and everything that actually processes personal data — lives at mixva.shakthi.xyz. That surface has its own, longer Privacy Policy covering accounts, sessions, licence-token telemetry, the beta waiting list, and the audit log. If you’re here because of Mixva, that’s the document you want.
5. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data erased (“right to be forgotten”)
- Restrict how we process it
- Receive a portable copy of it
- Object to processing based on legitimate interest
- Lodge a complaint with the supervisory authority. For Berlin residents this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Given how little the personal site collects, the practical right most people will exercise is having any residual server-log entries associated with their IP purged. Email hello@shakthi.xyz and we’ll respond within 30 days per Art. 12(3) GDPR.
6. Changes
We’ll update this page when the data we handle on the personal site changes. The “Last updated” date at the top always reflects the current revision.