Privacy Policy
Last updated: October 21, 2026 • DPDP Act 2023 Aligned
1. Our Privacy Philosophy
DiyaVerse is built upon a fundamental tenet: Data Minimization. Lighting a festive diya requires no personal identification, no registration, no contact lists, and no location tracking. You are completely anonymous.
2. Information We Collect
When you light a diya or interact with DiyaVerse, we collect only the minimal data required to display your diya:
- Diya Attributes: Selected diya style (e.g. clay, lotus), wish text, dedication category or short text, and language preference.
- Anonymous Identifiers: A randomly generated session token stored in your browser's sessionStorage to ensure smooth navigation. If you accept the analytics notice, an anonymous visitor ID is stored in localStorage.
- Technical Context: Coarse device type (mobile, tablet, desktop) and browser family derived on the server. The raw User-Agent string is immediately discarded.
- Referral Context: Referrer hostname (e.g. whatsapp.com) and standard UTM campaign parameters to understand traffic sources.
3. What We Strictly Never Collect
- We do not collect names, mobile numbers, or email addresses (except when you voluntarily write to us via the contact form).
- We do not track precise GPS coordinates or city-level geolocation.
- We do not store raw IP addresses. A daily-rotating, salted cryptographic hash is used solely in memory for rate limiting and coarse spam defense, and is discarded.
- We do not use third-party advertising cookies or cross-site tracking pixels.
4. Data Retention
Raw, anonymized analytics event logs are automatically expunged after 90 days. Aggregated daily counts (such as total diyas lit per day) are retained indefinitely to preserve historical festival milestones.
5. Right to Erasure & Removal
If you or someone else attached a wish containing accidental personal information, you have the full right to have it deleted.
You can report the diya directly via the “Report” button on its page, or submit a removal request on our Contact Page specifying the Diya ID (e.g. /d/abc123XYZ9). Our moderation team processes removals within 24 hours.
6. Contact Our Grievance Officer
For any queries or grievance under the Digital Personal Data Protection Act, please contact us at: privacy@diyaverse.in
