Privacy Policy

1. Who is responsible for your data

The Internet Records is operated by Omkar Jaripatke, an individual based in Silvassa, India. For the personal data described below we decide why and how it is used (in Indian law, we are the “data fiduciary”). Contact for any privacy question or request: theinternetrecords@gmail.com (also see the Contact page).

Payments are different: Dodo Payments is the seller of record and processes your card and billing details under its own privacy notice. We never receive your full card number.

2. What we collect

• Account data: your email address and, if you sign in with Google, the name and profile details Google shares with us.
• Profile data: the display name you choose.
• Claim and payment records: which records you claim, the amounts, timestamps, payment status and the payment reference. Card details are entered with our payment provider and are not received or stored by us.
• Activity logs: security and audit entries, such as the time you accepted our Terms and Refund policy, and the notifications we show you.
• Technical data: IP address, browser and device information, processed by our hosting and security providers to run and protect the service.
• Messages you send us: when you email us for support, a refund or a privacy request.

3. What is public

Record pages, certificates and share images are public. For each record we publicly show the current holder's display name, claim amounts and dates, and the record's history. Your email address is never shown publicly. Choose a display name you are comfortable making public. You can change it at any time in your account.

4. Why we use your data

• To create and secure your account and let you sign in.
• To run claims, take payments, show record history and tell you when you are dethroned (this is the service you ask for).
• To prevent fraud and abuse, resolve disputes and meet legal, tax and accounting duties.
• To operate, maintain and improve the service.

We do not use your data for advertising, we do not sell it, and we do not profile you.

5. Consent

By creating an account and using the service you agree to this use of your data. You can withdraw that consent at any time by emailing us to close your account. Withdrawing does not undo what already happened, and we may keep records that we are required to keep (section 8). Without the data needed to run claims and payments we cannot provide the service.

6. Who processes data for us

We share data only with service providers that help us run the service:

• Supabase: database and sign-in (project region: Mumbai, India).
• Google: optional sign-in with a Google account.
• Dodo Payments: payment processing, invoicing and tax as seller of record. Its own privacy notice applies to payments.
• Cloudflare: delivers and protects the website; it sees technical data such as IP address.
• An email provider, if and when we send email notifications.

We do not sell personal data. We may disclose data where the law requires it or to protect our rights, for example to answer a lawful request from an authority or to handle a payment dispute.

7. Cookies

We use essential cookies and similar storage to keep you signed in, protect your session and remember your theme choice. We do not use advertising or analytics cookies. If we add analytics, we will update this policy first.

8. How long we keep data

We keep account data while your account exists. Claim, payment and audit records are kept as long as needed for legal, tax, security and dispute purposes (for payments, typically several years as tax rules require). Record history is part of the public record, so a history entry may remain after an account is closed; you can change your display name at any time, and when you ask us to close your account we will remove or anonymise your name on public pages as far as the law allows.

9. Your rights

You can ask us to give you a summary of the data we hold about you, to correct it, or to delete it. You can withdraw consent, and you can name another person to exercise your rights for you if you die or cannot act. Depending on where you live (for example under India's Digital Personal Data Protection Act, the GDPR, UK GDPR or California law), you may have further rights, such as objecting to or restricting some processing.

Email theinternetrecords@gmail.com from your account email. We may need to verify your identity first. We acknowledge requests within 24 hours and aim to answer within 15 days.

10. Complaints

Contact our Grievance Officer first (Omkar Jaripatke, theinternetrecords@gmail.com). If you are not satisfied with the answer, you may complain to the data protection authority where you live; in India that is the Data Protection Board of India.

11. International transfers

Our database is hosted in India. Our providers (for example Cloudflare and Dodo Payments) may process data in other countries. Where the law requires it, we rely on appropriate safeguards for those transfers.

12. Security and data breaches

We use access controls, encryption in transit, server-side checks and two-step login for administrators to protect data. No system is perfectly secure. If a personal data breach affects you, we will tell you and the authorities as the law requires.

13. Children

The service is for people aged 18 or over. We do not knowingly collect data from children, and we delete an account when we learn it belongs to someone under 18.

14. Changes

We may update this policy. Material changes will be posted here with a new date and, where appropriate, notified in the service.