Privacy Policy

Scope

This policy covers blogs.tirup.in, the engineering blog of Tirup Mehta. It explains what is collected when you read an article, how that information is used, and what choices you have. The blog is a read-only publication: there are no reader accounts, no comment system, and no first-party forms. Data is never sold, and no advertising or data-broker scripts run on this domain.

What is collected automatically

Two services process requests to this domain, both operated by Vercel Inc.:

• Vercel Analytics: aggregate page views, referrer, device type, browser, operating system, and country. It does not use cookies and does not build a cross-site profile of individual readers.
• Vercel hosting and CDN: standard request logs (IP address, path, user agent, timestamp) are processed to serve pages and defend the site against abuse. Logs are retained only as long as needed for those purposes.

Article storage

Published articles are stored in a Convex database and rendered by this site. Reading an article does not create a record about you. The author's own editorial dashboard is protected by a signed, httpOnly session cookie that only the author holds; it is never issued to readers.

Cookies and local storage

No first-party analytics cookies are set for readers. A light or dark theme preference is saved in your browser's localStorage. That value stays on your device and is never transmitted to this site. Third-party services linked from an article may set their own cookies after you follow a link; those are governed by their policies.

What is not collected

• Reader accounts, passwords, or profile data: there is no reader sign-in.
• Contact form submissions: contact happens on external platforms.
• Payment or billing information.
• Precise geolocation beyond country level.
• Behavioural advertising identifiers or cross-site tracking pixels.

Retention and your rights

Analytics and request data are retained under Vercel's default retention periods. Because this blog keeps no first-party profile of readers, there is usually nothing to export or delete. If you are in the European Economic Area or the United Kingdom and believe data about you was processed here, you can ask for access, correction, or erasure, and you can object to processing. Requests are answered within 30 days.

Changes to this policy

This policy is updated when analytics tooling, hosting, or the law changes. Material changes are reflected in the date at the top of this page. Continued use of the blog after an update means you accept the revised policy.

Contact

Questions or data requests go to Tirup Mehta through the channels listed at tirup.in/contact. For machine-readable details about this site, see the API documentation and the agent guide.