Website Privacy Policy

1. Website scope and operator

This policy applies only to hikecalculator.in and its browser-based calculators and contact service. It does not cover mobile applications or their permissions, device storage or data flows.

The website is operated and maintained by Suraj JD. For personal-data questions or grievances, use the website contact page. Policy version: 2026-10-01.1, updated 1 October 2026.

We do not require calculator accounts, payment credentials or uploaded documents. We do not sell calculator inputs or contact details, or use contact messages for marketing.

2. Calculator inputs and website requests

Editing and calculating normally happens in browser memory, without sending those edits to a calculator database. This is different from opening or copying a shared result link: its inputs appear in the URL and are sent to the website to render the result.

We process information needed to deliver requested functions and respond to voluntarily supplied enquiries for those specified purposes, subject to applicable law. Optional Analytics uses your affirmative choice; rejecting it does not limit the tools.

Do not put confidential financial information or identifiers in shareable links. A link is not private just because its page is marked noindex. Copies or printouts are under your and their recipients' control.

3. Google Analytics and advertising

On eligible clean production calculator URLs, Google Analytics loads only after you allow it in Privacy settings. It can use cookie/browser identifiers, device and usage information and approximate location to measure the website. It is not described here as anonymous.

Shared financial-query URLs, legacy numeric-result paths, contact/privacy pages and local previews do not load our Analytics tag. The code does not send calculator inputs or message fields as Analytics parameters, and restricts referrer information. Google processes Analytics data under its own terms; see Google's data-collection explanation and privacy policy.

Google AdSense is not enabled in this rebuilt website. The existing site's advertising configuration is not automatically copied into these pages. Before activating ads, the operator must update this notice and implement appropriate advertising consent and regional requirements. Google's publisher consent requirements include a certified CMP for relevant EEA, UK and Swiss ad traffic; these local Analytics controls are not represented as that CMP.

4. What happens when you contact us

The form asks for your full name, reply email, subject and message, plus a maths security answer. The four message fields go to our website's server and then to FormSubmit, which forwards the enquiry to the operator's contact mailbox. They are used to answer, investigate and resolve that enquiry, not for newsletters or advertising. The security answer is checked by our server and is not forwarded to FormSubmit.

FormSubmit and the mailbox provider process message contents and delivery information. Read FormSubmit's privacy terms. Our application does not store submitted messages in a contact database or intentionally log their contents. The contact endpoint uses short-lived in-memory anti-abuse counters; when trusted Cloudflare client-IP handling is enabled, the counter uses a salted IP-derived key, not a stored plain IP.

Please do not send passwords, OTPs, Aadhaar/PAN, payment credentials, payslips or identifying child information. Direct email bypasses FormSubmit but still uses email-service providers. Sending an enquiry is not consent to optional tracking.

5. Service providers, external links and processing locations

• Cloudflare CDN and the website host: deliver and protect requests. They can process IPs, URLs and request metadata. Cloudflare privacy policy.
• Google Analytics: optional traffic measurement after your choice.
• FormSubmit and email providers: enquiry forwarding, delivery and responses.

Provider services may process data outside India. We do not promise India-only storage. Provider retention, location and account-level configurations must be reviewed by the operator; you may contact us for details relevant to your request.

WhatsApp, official-source references and the creator's portfolio are outbound links, not embedded chat, maps or social-tracking widgets. Once you visit them, their operators' privacy practices apply. Our WhatsApp link does not itself ask this website to collect your phone number.

6. Retention, deletion and security

Calculator edits ordinarily last until the page is left or refreshed; copied URLs, browser histories and saved files can persist independently. A small FinCalc AI app promotion uses a browser-local shown timestamp to limit it to once every seven days. It has no visitor identifier, does not contact Google Play until you choose the link, and is skipped if that preference cannot be stored. Google Play has its own privacy practices; this website notice does not cover the app. The privacy choice expires after 180 days or a policy-version change. You can overwrite it by rejecting optional Analytics or remove it with browser site-data controls.

Contact correspondence is kept only as needed to handle the enquiry, follow-up, disputes or applicable legal obligations. Mailbox, FormSubmit, Cloudflare, hosting logs and Google Analytics have provider/account-controlled retention; this code does not set or verify all of those external periods. Ask us for the current settings or request erasure. Deletion may be limited by legal retention, security evidence and backup rotation, which we will explain where relevant.

The contact relay uses HTTPS to FormSubmit, validates fields, restricts request origins and applies basic anti-abuse limits. No system is perfectly secure. Production HTTPS, access controls, vendor settings and incident handling also depend on deployment and operator procedures. A suspected data issue can be reported at our security contact route.

7. Privacy requests and grievance redressal

You may ask about information we hold, request correction/completion or erasure, withdraw optional consent, raise a grievance, or ask about nomination arrangements where applicable. Use the subject “Privacy request / grievance” on Contact. Initial requests do not require government identity numbers.

Include the relevant prior message/date and your requested action. We may verify control of the reply address or ask for proportionate context. We will investigate the systems involved, explain any applicable exception and communicate the outcome. Grievances are to be addressed within a published period of 90 days from receipt; urgent security concerns should be marked clearly.

The DPDP Act, 2023 and DPDP Rules, 2025 provide the relevant framework. Statutory rights and duties apply according to their phased commencement and other applicable law; this policy is not a certificate of legal compliance. The November 2025 commencement notification schedules most operational Act provisions eighteen months after publication.

If a concern is not resolved, use the competent authority's applicable complaint process, including the Data Protection Board mechanism when available and applicable, after the required website grievance opportunity. We do not claim to file an authority complaint on your behalf.

8. Children and policy updates

This website is intended for adults making salary and family-planning decisions, not as a service directed to children under 18. Optional Analytics is offered for adults only. We do not ask for a child's name or birth date; SSY planning uses an approximate starting age. Linking that age with other details can still identify a person, so avoid identifiable child data in messages and shared URLs.

Parents or guardians who believe identifying child information was submitted should contact us for review and appropriate action. These general controls are not a verifiable parental-consent system for a child-directed service.

Material changes to data use will require an updated notice and, where needed, a new choice before optional processing. The updated date and policy version identify this notice; new purposes are not automatically authorized by your old choice.