Our Commitment to Your Privacy
This website (nanasunkersett.com) serves as a digital memorial to honour Jagannath "Nana" Shankarshet and hosts a public petition to rename Mumbai Central Railway Station.
We take personal data protection seriously. In accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, this notice informs you of the personal data we collect, why we collect it, how it is processed, and your rights regarding your information.
1. What Personal Data We Collect
We only collect data that you voluntarily provide to us when interacting with the site's interactive features:
- Public Petition Campaign: Full name, email address, city, and optionally your PIN code and a brief support message. We also generate secure cryptographically-hashed (HMAC-SHA256) identifiers from your IP address and browser User Agent to prevent automated spam and duplicate entries. We do NOT store your raw IP address or User Agent in the petition database.
- Digital Memorial Tributes (Respects): Optionally your city, optionally a note of remembrance (displayed on the Remembrance Wall). We store the raw IP address temporarily in rate-limiting logs to prevent database abuse, which are purged periodically.
2. Purpose of Collection & Processing
Your data is processed strictly for the following purposes:
- Validation: To ensure all signatures on the petition are genuine and unique, preventing fraudulent representations. We accept signatures directly in good faith without an email verification loop, but utilize secure cryptographic hashing of browser metadata to prevent automated spam and duplicates.
- Consented Display: If you check the explicit consent box, your name and city are displayed on the public list of petition supporters, or your tribute note is displayed on the Remembrance Wall. Your email address is never displayed publicly.
- Communication: If you explicitly consent to receive updates, we may contact you regarding campaign progress.
3. Zero-Cookie Architecture & Tracking
We respect your digital autonomy. This website operates on a Zero-Cookie Architecture:
- No Tracking Cookies: We do not place advertising cookies, third-party tracking pixels (such as Meta/Facebook Pixel), or behavioral surveillance scripts on your device.
- No Cross-Site Profiling: We do not track your browsing habits across external websites, nor do we sell, trade, or monetize visitor data.
- Privacy-First Web Analytics: Any site telemetry (such as Cloudflare Web Analytics) measures lightweight aggregate page performance without recording personal identifiers or setting persistent cookies on your browser.
- No Intrusive Banners Required: Because this website does not store non-essential tracking cookies on your machine, no intrusive cookie consent banner is legally required under the DPDP Act, GDPR, or ePrivacy regulations.
4. Data Security and Storage
All collected personal data is stored securely in Cloudflare D1 databases located in regions matching secure data residency standards. We implement structural encryption and cryptographic hashing to protect your email address and IP metadata from breach.
5. Sharing and Disclosure
We do not sell, rent, or trade your personal data. The petition signatures (excluding email addresses, hashed metadata, and consent logs) will be presented collectively to the relevant government authorities (such as the Ministry of Railways or local civic bodies) as part of the formal campaign submission.
6. Your Rights (Access, Correction & Erasure)
Under the DPDP Act 2023, you hold the right to access, verify, correct, or request the erasure of your personal data at any time.
If you wish to remove your signature from the petition or withdraw your tribute note, please email us at [email protected] with the name and email address used for submission. We will process your request and permanently erase the corresponding database records within 72 hours of verification.
7. Updates to this Notice
We may update this Privacy Policy from time to time. The latest version will always be published on this page with the effective date.
Effective Date: September 13, 2026