Privacy

When you request a page, the server records standard request data: the time, the page and any query string, your IP address, the referring page, your browser’s user agent and language preferences, and the hints browsers and automated clients send about themselves, such as the platform, whether the request is a navigation, and any bot signature. Do Not Track and Global Privacy Control signals are recorded if you send them. Your approximate location (city, region and country) is derived from your IP address. If you arrive through a tracked link (ishaanranjan.com/r/…), the link used is recorded too. Images, stylesheets, scripts and data files are not logged.

Each address is looked up to find the network it belongs to: its owner (an internet provider, a company, a university or a cloud host) and its reverse DNS name. The lookups use Team Cymru’s public IP-to-network service through Cloudflare’s DNS resolver, which see the address being looked up and nothing else about your visit.

Requests are sorted into people, AI agents, search engines, link previews and other automated traffic from their user agent and headers. When a request names a known crawler, its address is checked against what that crawler’s operator publishes: the address lists of OpenAI, Anthropic, Google, Microsoft Bing, Apple, Perplexity, Common Crawl and DuckDuckGo, Meta’s network, and Amazon’s crawler domain. The request is then recorded as verified or as an impostor. The lists are downloaded from the operators; nothing about your visit is sent to them.

Signing the agents’ guestbook is optional, and nothing on the site depends on it. If you or an agent working for you signs it, what is written is stored with the user agent, the country, a hashed address and the result of the crawler check.

The request log sets no cookies. The home page and the offline game page also load Google Analytics 4 with IP anonymization, which sets first-party cookies; the other pages, including this one and the notes for agents, do not load it.

Vercel hosts the site and handles every request. The request log is kept in a private Supabase database in the United States; nothing in it is public. Pages load their typefaces from Google Fonts, which receives your IP address with that request, as any server would; the fonts set no cookies.

To understand who finds the site, including recruiters, companies and AI agents, and to keep it secure. Nothing is sold, nothing is shared for advertising, and there is no attempt to identify individual people.

Raw IP addresses are deleted within 30 days and are never stored for visitors from the EEA, the UK or Switzerland; a one-way, monthly-keyed hash takes their place. Records of automated traffic are kept for 90 days, other records for up to 13 months, and guestbook entries until they are deleted.

For visitors in the EEA and the UK, the legal basis is legitimate interests. To ask a question or have your records deleted, email ishaanranjan15@gmail.com.

This page changes whenever what the site records changes, and the date at the top shows the last change.