Privacy Policy
This site is a one-person consultancy, not a platform. The data it holds is small and the list of things done with it is short, so this policy names every processor rather than saying “third parties” and leaving you to guess.
Last updated: 21 August 2026
Who is responsible. Saurav Sharma, an independent Shopify developer based in Chandigarh, India, is the controller for personal data collected through www.ersaurav.com. Contact: [email protected].
1. The short version
- Browsing the site: anonymous analytics only.
- Submitting a form: I get your details by email so I can reply. Nothing else.
- Using the chat widget: your messages are stored and processed by an AI model to draft replies.
- Nothing is sold, rented or shared for advertising. There is no mailing list, so there is nothing to be added to.
2. What is collected, and why
| When | What | Why |
|---|---|---|
| Any page visit | Anonymised IP, browser and device type, pages viewed, referrer, approximate region | Understanding which pages are useful, and whether the site performs on real devices |
| Contact, homepage or teardown form | Name, email, and whatever you choose to enter: store URL, plan, project type, budget band, timeline, your message. Your IP, browser and the referring page are recorded with the submission. | Replying to you, and identifying spam or automated submissions |
| Plan calculator lead step | Name, email, and the figures you entered into the calculator | Sending the result and, if relevant, following up on it |
| Chat widget | Your messages, your email if you verify one, and a session cookie | Continuing the conversation, and drafting a reply |
The IP and browser string recorded with a form submission are anti-abuse measures. They are also what the rate limiter uses to stop the same form being submitted repeatedly.
3. Who processes it
The complete list. There are no others.
| Processor | What it handles | Where |
|---|---|---|
| Google Analytics 4 (Google Ireland/LLC) |
Anonymised traffic measurement, with IP anonymisation on by default in GA4. No advertising or remarketing features are enabled, and no Google Ads account is linked. | EU / US |
| Hostinger | Web hosting, the MySQL database behind the chat widget, and the authenticated SMTP account that sends form notifications and your confirmation email. | EU |
| Cloudflare | CDN and proxy in front of the site, and the source of the cdnjs-hosted Fancybox library used for image lightboxes. Sees request metadata, including your IP, in order to route and protect traffic. | Global edge |
| Google Gemini API | Chat messages only. When you use the chat widget, the message text is sent to Gemini to draft a reply. Nothing from any form or from analytics is sent to it. | US |
Form submissions arrive in a mailbox I control and are not passed to a CRM, a marketing platform, or any other third-party system.
Because I am in India and some processors are in the US, data may be transferred outside the UK and EEA. Those transfers rely on the receiving providers’ standard contractual clauses.
4. Cookies
| Cookie | Set by | Purpose | Life |
|---|---|---|---|
_ga, _ga_* |
Google Analytics | Distinguishes one visitor from another for traffic measurement | Up to 2 years |
chat_session |
This site | Keeps a chat conversation continuous across page loads. Only set if you use the chat. | 3 days |
| Cloudflare operational cookies | Cloudflare | Security and traffic routing | Session to 1 year |
No advertising, remarketing or cross-site tracking cookies are set. You can block or delete any of these in your browser; the site works without them, apart from the chat, which needs its session cookie to know which conversation is yours.
5. How long it is kept
- Analytics: 14 months, then deleted automatically by GA4.
- Form submissions and email: kept while there is an active or prospective engagement, and for up to 24 months after the last contact, so I can pick up a conversation that resumes. Then deleted.
- Records relating to paid work: retained as long as tax and accounting rules require, which is longer than the above and outside my discretion.
- Chat transcripts: 12 months from the last message in the conversation.
- Anti-abuse records (the temporary rate-limit files): under one hour.
6. Legal basis
For visitors in the UK and EEA, where the UK GDPR and GDPR apply:
- Replying to your enquiry: legitimate interests, and steps taken at your request prior to entering a contract. You sent me a message; answering it is the expected outcome.
- Analytics and the chat widget: consent, where your local rules require it for non-essential cookies.
- Security and anti-abuse, legitimate interests in keeping the site working and unspammed.
- Financial records, legal obligation.
7. Your rights
You can ask me to give you a copy of what I hold about you, correct it, delete it, restrict what I do with it, or object to it being processed at all. There is no charge and no form to fill in, email [email protected] and say what you want. I will respond within 30 days.
In practice a deletion request is straightforward: your email thread is deleted, any chat transcript is deleted, and analytics never held anything identifying you in the first place. If you are in the UK or EEA and are unhappy with how I have handled a request, you can complain to your national data protection authority.
8. Children
This site is aimed at businesses and is not intended for anyone under 16. I do not knowingly collect data from children. If you believe a child has submitted something, email me and I will delete it.
9. Security, honestly stated
The site runs over HTTPS, form mail goes out over authenticated SMTP, chat credentials are kept out of the repository, and the forms carry rate limiting and honeypot protection. That is a reasonable standard for a site of this size and it is not a guarantee, no online transmission is completely secure, and anyone telling you otherwise is overselling.
10. Links out
Links to Upwork, LinkedIn, X, Shopify and other external sites are subject to those sites’ own policies, not this one.
11. Changes
If the processor list changes, this page changes in the same edit and the date at the top moves. There is no notification list to be on, so if this matters to you, the date is the thing to check.
12. Contact
Related: Terms of Service · Payment Terms · Contact