Exactly what this site collects
I sell governance. It would be absurd to run a site that could not answer the questions I ask other people. So here is the full inventory.
| What | When | Why | Retention |
|---|---|---|---|
| Diagnostic scores Four layer scores, sector, jurisdiction, action class, volume band | When you complete the diagnostic | To build a sector benchmark. No organisation name, no email, no identifier, no IP address is stored with it — the row cannot be traced back to you. | 24 months |
| Inquiry details Name, email, organisation, situation, timeline | Only when you submit the contact form | To respond to you. This is the only place identity is attached, and you attach it deliberately. | Until the conversation concludes, then deleted on request |
| Subscriber email | Only if you subscribe | To send new writing. | Until you unsubscribe |
| Anonymous usage events Page viewed, diagnostic started/completed, booking link clicked, form submitted | As you use the site | To see which pages are useful and where people give up. Processed by PostHog. Configured cookieless: nothing is written to your device, your IP is stripped before the event leaves your browser, there is no session recording, and no profile is built across visits. Requests are proxied through this domain, so your browser never contacts a third-party host. | 12 months |
| Referrer tag e.g. utm_source=article | With the above | To know which page led somewhere useful. | With the record it belongs to |
What this site does not do
- No cookies, and nothing written to your device — not even local storage. There is no consent banner because there is nothing stored to consent to.
- No advertising tags, no tracking pixels, no session recording, no cross-site tracking, and no third-party fonts or scripts loaded in your browser. Usage analytics run through PostHog in the cookieless, IP-stripped configuration described above — named here rather than buried, because a page like this is worthless if it is not exhaustive.
- No IP address retained, and none tied to your diagnostic responses.
- Nothing is sold, shared or passed to a data broker. Ever.
- The diagnostic works whether or not the storage layer is reachable — the report is computed in your browser.
Your rights
Under India’s DPDP Act and the GDPR you can ask for access, correction, or erasure of anything identifying you. Since diagnostic rows carry no identifier, the practical scope is inquiries and subscriptions. Write to vikram@vikramjha.work and it will be handled within 30 days.
Where it lives
A managed Postgres database in a single region, reachable only over a private network, with transport encryption enforced for any connection that leaves it. Access is limited to the practice principal.
If this page and the site’s behaviour ever disagree, the page is the commitment and the behaviour is the bug — tell me and I will fix it. Everything above is verifiable from your own browser’s network tab in about thirty seconds, which is rather the point.