Privacy notice
This page says, in plain words, what altsig.ai records about you, what it never records, how long things are kept, and the choices you have. It is written from what the site's code actually does.
Who runs this site
altsig.ai is run by Yugantara Tech, Delhi, India. Grievance officer: Anshul Thakkar, anshul@yugantaratech.ai. General contact: admin@yugantaratech.ai.
What we collect when you visit
When a page loads, your browser sends a short description of the visit, and — only if you press Allow on the consent banner — it also sends how you use the page. The table below lists each item, an example, why it is kept, and how long it is kept.
| Item | Example | Why | How long kept |
|---|---|---|---|
| Pages you visit | /soh, /Vedas | To run the site and know which pages are used | Kept until you delete your account or ask for deletion |
Clicks (position plus a structural label such as
button#allow) | A click at x=120, y=300 | To understand which parts of a page are used | Kept until you delete your account or ask for deletion |
| Scroll depth and active reading time | 45 seconds of active reading, deepest scroll 800 px | To understand which parts of a page are used. Time counts only while the tab is visible and you are active; a tab left open over lunch accrues nothing | Kept until you delete your account or ask for deletion |
| Session replay trace: cursor path samples (10 per second), clicks, scrolls, window resizes | A trail of cursor positions on a page | To replay how a page was used, never what it said | Kept until you delete your account or ask for deletion |
| Key presses, counted only | “3 keys pressed in this second” | To tell typing apart from reading | Kept until you delete your account or ask for deletion |
| Device and browser details | Phone or desktop, operating system, browser name, screen and window size, language, time zone, connection type | To show pages that fit your screen | Kept with the visit record, until you delete your account or ask for deletion |
| Your IP address | 49.37.x.x (the full address and the forwarding chain behind it) | Security: to spot abuse and keep sign-in safe | Kept with the visit record, until you delete your account or ask for deletion |
| Rough location from the IP (country, state, city) — never your exact location | Empty today — no lookup is wired up | Security and coarse personalization. Your exact location is never asked for | Kept with the visit record |
| Your consent choice | “Allowed analytics, notice v1, 12 May” | To prove what you chose and when | Kept as a permanent append-only record |
| Where you left off (last page, scroll position, panel or tab) | /soh, scrolled halfway | To pick up where you left off when you return | Until you press “Start over”, withdraw consent, or ask for deletion |
| A salted hash of your IP linked to your visitor id | An unreadable 32-character code, not the address | To recognise a returning visitor whose cookies were cleared. A shared address (office, mobile network) matches many visitors and then matches nobody — it never restores a stranger's page | Until you withdraw consent or ask for deletion |
If you do not press Allow: the visit record above (IP, device and browser details) is still stored for security, but behaviour events — pageviews, clicks, replay traces — are dropped and never stored. Pressing “No thanks” does not make you invisible, it stops behaviour recording.
What we collect when you sign in
- Your email address, when you sign in with a one-time code sent through Gmail. The code itself is stored only as an unreadable hash, and each code expires after 10 minutes. There is no Amazon service in this path.
- Your Google account name, email address and profile picture, when you sign in with Google in one click. Google checks your sign-in; we keep the name, email and picture it confirms.
- Your sign-in history: which method was used, when, and whether each attempt succeeded or failed — kept as a permanent append-only record for security.
- Your active sessions: browser description and a hashed IP per session, so the account page can show where you are signed in.
What your browser settings tell us
- Global Privacy Control. If your browser sends a Global Privacy Control signal, behaviour recording is switched off for that visit — even if you earlier pressed Allow. Stored consent stays as it was; the signal only suppresses recording while it is present.
- Do Not Track, dark/light preference, and reduced-motion preference, which are stored with the visit record.
- Precise location is a separate permission that the site never asks for, so it is never collected. One-time sign-in codes are sent when you ask to sign in, and with your consent we may also send service and marketing emails. You can opt out of marketing emails at any time.
What our behaviour analytics does not capture
Sign-in details that you submit are collected separately, as described above.
- What you type: key contents, form values, draft text, clipboard contents.
- Page contents or element text. Click labels describe structure
(
button#allow), never words on the page. - Your precise location.
- Your device's MAC address — no browser gives it to any website.
- Anything that fingerprints your device (no canvas, audio, font or graphics enumeration).
Cookies
| Name | Purpose | Lifetime |
|---|---|---|
kalki_aid | Anonymous visitor id, set by the server on first visit. Your browser cannot read it (HttpOnly), so a page script can neither spoof nor leak it | About 13 months |
kalki_sid | Sign-in token, set when you sign in. Only an unreadable hash of it is stored; a leaked database cannot mint sessions | 90 days (the sign-in setting; signing out clears it immediately) |
Privacy choices
To withdraw analytics consent in this browser, go to an altsig.ai page
where analytics is enabled, open your browser's Developer Tools, choose the
Console tab, and run window.altsig.declineConsent().
This stops behaviour capture in that tab immediately, saves “No thanks” in this browser, and sends the withdrawal to the server. Reload any other open altsig.ai tabs so they use the saved choice. Repeat on other browsers or devices where you allowed analytics. These legal pages do not load the analytics SDK; running the command here will not work.
For help withdrawing consent, or to request deletion of your data or account, email admin@yugantaratech.ai. Withdrawing consent does not delete previously stored records; ask for deletion separately. See retention for the records kept for audit.
- The banner. “No thanks” means no behaviour recording. “Allow” starts it. You can change your mind any time.
- Global Privacy Control. Turn it on in your browser and recording stops for every visit, no account needed.
- Start over. On a page with analytics enabled, run
window.altsig.reset()in the same console to forget where you were and clear the local session. - Withdraw consent. Withdrawing stops capture at once and immediately clears your resume point and IP linkage; your stored behaviour events are removed when you delete your account or ask for deletion (see “How long we keep things” and “Your rights”).
Who we share with
- Cloudflare, which hosts altsig.ai and delivers its pages (CDN).
- Gmail, which delivers one-time sign-in codes by email. No Amazon service sends your mail.
- Google, when you choose Google sign-in — Google verifies your sign-in and confirms your name, email and picture.
- Mobile-number sign-in by text message is not offered today, so no SMS gateway handles your number.
- Google Fonts. The altsig.ai/soh page loads its typefaces from fonts.googleapis.com, so Google receives your IP address when that page loads.
That is the whole list. We do not sell personal data, and there are no advertisers or other third-party trackers on the site.
How long we keep things
Visit and behaviour records are kept for as long as they are needed to run the site and keep sign-in safe, and are removed when you delete your account or ask for deletion (see “Your rights”).
- Account data (profile, sessions, preferences): until you delete your account.
- Consent choices and sign-in history: kept as permanent append-only records, so your choices and account security can be audited.
- Where your data lives: visit and account records are stored on the operator's own server in India.
Your rights
- See and correct your data: request your profile, sessions and recent sign-in activity by email.
- Delete your data: request data or account deletion by email. Deletion removes your behaviour events, visit records, resume point, IP linkage and usage summaries — plus, for a full account deletion, your preferences, experiment assignments and identity links. Your consent record itself is kept as the permanent audit trail. To delete sign-in records too, write to admin@yugantaratech.ai and they are deleted on request.
- Withdraw consent any time, as described under Privacy choices.
- Contact the grievance officer to exercise any of these rights: Anshul Thakkar, anshul@yugantaratech.ai (general: admin@yugantaratech.ai).
Children
This site is for adults aged 18 and over. Accounts that are under 18, or whose age is unknown, have behaviour recording locked off until adulthood is confirmed.
Changes to this notice
When this notice changes, its version (shown at the top of this page) changes with it, and the consent banner records which version you agreed to.