Privacy Policy

Goldkosh ("we", "our", "us") operates goldkosh.com. This policy explains what data we collect, how we use it, and your rights under the Digital Personal Data Protection (DPDP) Act 2023 and applicable Indian law.

Goldkosh acts as a Data Fiduciary under the DPDP Act 2023. We process personal data only with your consent, which you give by accepting our cookie banner.

Data We Collect

Goldkosh does not require account creation. We collect the following only after you consent:

• Anonymous usage analytics via Google Analytics 4 (pages visited, device type, country, session duration)
• Heatmap and session recording data via Microsoft Clarity (anonymised — no personal identifiers)

We also collect standard server logs (IP address, browser type, referrer URL) for security and error monitoring purposes. These are retained for 30 days and are not linked to analytics data.

Cookies and Consent

Analytics cookies are loaded only after you click Accept on our cookie banner. If you click Decline, no analytics scripts are loaded.

To withdraw consent at any time, clear your browser cookies or local storage for goldkosh.com. The cookie banner will reappear on your next visit and no analytics will run until you accept again.

We do not use cookies for advertising targeting while ADSENSE_ACTIVE is false. When Google AdSense is activated, Google may use cookies for personalised ads — we will update this policy and require a separate consent at that time.

Advertising

Currently we display house advertisements (our own promotions). When Google AdSense is activated, Google may use cookies to serve personalised ads based on your browsing history. See Google's advertising policies.

Your Rights Under DPDP Act 2023

As a Data Principal under the DPDP Act 2023, you have the right to:

• Access — request a summary of personal data we hold about you
• Correction — request correction of inaccurate personal data
• Erasure — request deletion of your personal data
• Withdraw consent — withdraw analytics consent at any time (see Cookies section above)
• Grievance redressal — raise a complaint with our Grievance Officer (details below)

We do not sell personal data to third parties. We do not use personal data for automated decision-making that affects your rights.

Grievance Officer

For any data-related complaints, requests, or concerns, contact our Grievance Officer:

• Name: Goldkosh Team
• Email: hello@goldkosh.com
• Response time: We will acknowledge within 48 hours and resolve within 30 days

Data Retention

Analytics data in Google Analytics 4 is retained for 14 months (Google's default) before automatic deletion. Server logs are deleted after 30 days. We do not store analytics data on our own servers.

Third-Party Services

• Google Analytics 4 — usage analytics (consent-gated)
• Microsoft Clarity — heatmaps and session recording (consent-gated, anonymised)
• Vercel — hosting and server logs
• Cloudflare — DNS, CDN, and DDoS protection

Each third-party service processes data according to their own privacy policies. We have no control over their data practices beyond what we configure in their dashboards.

Changes to This Policy

We may update this policy as we add new features or comply with regulatory changes. The effective date at the top of this page will always reflect the latest version. Material changes (such as activating AdSense or adding new data processors) will be communicated via the cookie banner.