We collect almost nothing. No Google Analytics, no Facebook Pixel, no tracking cookies, no email capture forms, no ad networks. The only personal data we ever see is what you voluntarily email us at classytechstudio@gmail.com. Server logs (IP, user agent, timestamp) exist because web servers require them — we don’t analyze them. If you want zero digital footprint, this is as close as it gets on the modern web.
Data We Collect (And What We Don’t)
Here’s the complete inventory — no hidden clauses, no “and other information” vagueness.
| Data Type | Collected? | Details |
|---|---|---|
| Name | No | Unless you include it in an email to us |
| Email Address | Only if you email us | Stored in Gmail (Google’s privacy policy applies). We don’t export, list-build, or newsletter it. |
| Message Content | Only if you email us | Replied to, then archived. Not shared. |
| IP Address | Server logs only | Standard nginx/Apache access logs. We don’t query, analyze, or retain beyond host rotation (typically 7–30 days). |
| User Agent / Browser | Server logs only | Same as above. Helps debug 500 errors if they happen. |
| Referrer URL | Server logs only | Not tracked by us. |
| Cookies (Tracking) | No | Zero. No GA, no FB Pixel, no Hotjar, no Clarity. |
| Cookies (Session/Essential) | No | Static site — no CMS, no login, no session cookies. |
| LocalStorage / IndexedDB | No | We don’t write to browser storage. |
| Device Fingerprinting | No | No Canvas API, no AudioContext, no battery status API. |
| Scroll/Heatmap Tracking | No | No Microsoft Clarity, no Hotjar, no Crazy Egg. |
| Form Submissions | No | No contact forms on this site. Email only. |
| Comment Data | No | No comment system. |
| Newsletter Signups | No | We don’t have a newsletter. |
✅ In plain English: If you just read this guide — we know nothing about you. Not your location, not your device, not your habits. If you email us — we know what you wrote. That’s it.
How We Use Your Data
| Purpose | Data Used | Legal Basis (GDPR) | Retention |
|---|---|---|---|
| Reply to your email | Your email + message | Legitimate interest / Contract | Archived in Gmail (searchable). Deleted on request. |
| Fix errors you report | Your message content | Legitimate interest | Until fixed + reasonable period |
| Improve guide accuracy | Your feedback on Ronix UI | Legitimate interest | Anonymized in guide updates |
| Debug server errors | IP, User Agent, URL, timestamp | Legitimate interest | Log rotation (7–30 days) |
We do NOT use your data for: Advertising, profiling, selling, sharing with third parties (except email provider Google), automated decision-making, or training AI models.
Cookies & Local Storage
🍪 Cookie Audit — As of November 3, 2026
| Cookie Name | Source | Purpose | Expires | Required? |
|---|---|---|---|---|
| None | — | This is a static HTML site. No CMS, no login, no cookies set by us. | — | N/A |
That’s it. Zero cookies. No _ga, _fbp, _gcl_au, _hjSessionUser, or any marketing/analytics cookies. Hosting provider (Netlify/Vercel/Cloudflare) may set security cookies (e.g., `__cf_bm` for Cloudflare Bot Management) — those are their cookies, governed by their policies.
LocalStorage / SessionStorage / IndexedDB: We write nothing. Third-party scripts (none currently) would be audited before inclusion.
Your Rights (GDPR, CCPA, Nepal)
Regardless of where you live, we honor these rights for any data you voluntarily give us (email content only):
| Right | What It Means | How to Exercise |
|---|---|---|
| Access | Know what we have on you | Email classytechstudio@gmail.com — we’ll reply within 30 days |
| Rectification | Correct inaccurate data | Same email — we’ll update/confirm |
| Erasure (“Right to be Forgotten”) | Delete your data | Same email — we’ll delete the email thread |
| Restriction | Limit processing | Same email — we’ll flag and restrict |
| Portability | Get your data in portable format | Same email — we’ll export as JSON/CSV |
| Object | Object to processing | Same email — we’ll stop (except legal obligations) |
| Withdraw Consent | If consent was basis | Same email — immediate effect |
🇳🇵 Nepal Context: Nepal’s Individual Privacy Act, 2018 (2075) grants similar rights. We comply. 🇺🇸 CCPA (California): We don’t “sell” personal information (no ad tech, no data brokers). 🇪🇺 GDPR: Lawful basis is almost always “legitimate interest” (replying to you, fixing errors, server security).
Data Retention
| Data Type | Retention Period | Deletion Trigger |
|---|---|---|
| Email threads (sent/received) | Indefinite (archived in Gmail) | On your request — we’ll delete the thread |
| Server access logs | 7–30 days (host rotation) | Automatic log rotation |
| Error/debug logs | 14 days | Automatic rotation |
Backups: Host-level backups (daily/weekly) may retain data longer. We cannot purge individual records from host backups — they expire per host policy (typically 30–90 days).
Security
- HTTPS everywhere: TLS 1.2/1.3, HSTS, valid cert (Let’s Encrypt via Netlify/Vercel/Cloudflare)
- Static site: No database, no CMS, no PHP, no WordPress — minimal attack surface
- Email: Gmail (Google’s security: 2FA, advanced protection, encryption in transit/rest)
- No sensitive data collected: No passwords, no payment info, no ID docs, no health data — so breach impact is minimal
- Content Security Policy: Restrictive CSP headers via hosting provider
⚠️ Honest disclaimer: No internet transmission is 100% secure. We implement reasonable measures for a static-content + email site. If you’re a high-risk user (journalist, activist, whistleblower), consider encrypted email (PGP) — ask for my public key.
Policy Changes
- We’ll update the Effective Date at the top of this page
- Material changes (new data collection, new third parties, new purposes) — announced via site banner + updated date
- Non-material changes (typo fixes, formatting, clarification) — updated silently
- Continued use after material change = acceptance. If you disagree, stop using the site and email us to delete your data.
Contact Us About Privacy
Data Controller: Basanta (Operator, ronixuiredmi.com)
- Email: classytechstudio@gmail.com
- Subject line: “Privacy Inquiry” or “Data Request”
- Response time: ≤30 days (GDPR standard), usually ≤48 hours
- Address: Kathmandu, Nepal (no physical office)
No Data Protection Officer appointed (not required for our scale). Basanta handles all requests personally.