Privacy#
This is the privacy policy for deswalsandbox.com — the marketing website for Deswal Sandbox, an independent software studio based in Bengaluru, India.
It is written in plain English. It is short on purpose. It does not contain dark patterns, hidden defaults, or the words "we value your privacy" followed by a request for tracking consent.
What I collect#
Three things, only.
Newsletter signups. If you submit your email to the newsletter, I store it in Buttondown — the newsletter service — until you unsubscribe or I close the newsletter. I use it to send you the lab's newsletter and nothing else.
Contact form submissions. If you write in via the contact form, I store the message in my inbox and in the lab's CRM, retained for 24 months by default. I use it to reply to you.
Anonymous analytics. Plausible tracks page views, referrers, and screen sizes — without cookies, without IP retention, without identifying you. The aggregate report tells me what people read. It does not tell me who you are.
What I don't collect#
- No third-party advertising cookies.
- No Facebook Pixel, no LinkedIn Insight, no Google Analytics.
- No session replays.
- No fingerprinting.
Where it lives#
The site runs on Vercel. DNS sits at Cloudflare. Transactional email goes through Resend. Form submissions are checked for spam by Cloudflare Turnstile. I review the sub-processor list quarterly.
Your rights#
You can request a copy of any data I have on you, or ask for it to be deleted, by emailing hello@deswalsandbox.com. I'll reply within five business days.
If you're in the EU, you have rights under GDPR; if you're in India, you have rights under the Digital Personal Data Protection Act, 2023. Both routes terminate at the same email.
Changes#
If I change this policy, I'll update the last_updated date at the top and note what changed.