Privacy Policy

Effective date: 1 April 2025. Last updated: 30 April 2026.

Summary

• We collect only what we need to operate the site.
• We do not sell your data to anyone.
• We use Google Analytics and Meta Pixel for audience measurement; you can opt out.
• Accounts and newsletter subscriptions are voluntary.
• You can request deletion of your data at any time.

1. Who We Are

Bodhi Commons ("we," "us," "our") is an open-access bilingual political knowledge platform operated from India. Our website is available at bodhicommons.org.

For questions about this policy or your personal data, contact us at: [email protected].

2. Information We Collect

2.1 Information you give us directly

• Account registration: email address, display name, and password (stored as a salted hash - we never store plaintext passwords).
• Contributor profile: biography, username, and optionally a profile photograph.
• Newsletter subscription: email address only.
• Article submissions and annotations: the text content you create while using the platform.

2.2 Information collected automatically

• Server logs: IP address, browser type, referring URL, pages visited, and timestamps. Logs are retained for up to 90 days and used solely for security monitoring and debugging.
• Session cookies: short-lived cookies to maintain your login state. These expire when you close your browser or after 30 minutes of inactivity.
• Persistent cookies: your language preference and theme setting are stored in your browser's local storage. These are stored client-side only and are not transmitted to our servers.

2.3 Analytics

We use Google Analytics 4 (GA4) to understand how readers use the site. Google Analytics sets its own cookies. Data collected by GA4 is processed by Google LLC and may be transferred internationally.

We use the Meta Pixel to measure the reach of content shared on Facebook and Instagram. This sends anonymised event data to Meta Platforms Inc.

We configure GA4 with IP anonymisation enabled. You can opt out using the Google Analytics Opt-out Browser Add-on, a browser-level privacy setting, or a content blocker.

3. How We Use Your Information

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on individuals.

4. Cookies

• Essential cookies: Required for secure login sessions. Cannot be disabled without breaking login functionality.
• Preference cookies: Store language and theme settings in your browser's local storage (not transmitted to our servers).
• Analytics cookies: Set by Google Analytics 4. Can be blocked using a browser extension or privacy control.
• Marketing pixels: Set by Meta (Facebook Pixel). Can be blocked using a browser extension or ad blocker.

We do not use cookies for targeted advertising, retargeting, or behavioural profiling.

5. Newsletter Subscriptions

If you subscribe to our newsletter, we store your email address and use it solely to send you editorial newsletters. Each newsletter contains an unsubscribe link. We do not share subscriber lists with third parties.

6. Sharing Your Information

We do not sell, rent, or trade your personal data. We may share data in the following limited circumstances:

• Service providers: We use hosting, email, and analytics services that process data on our behalf under contractual data processing agreements.
• Legal obligations: We will disclose data to law enforcement or courts if required by a valid legal order under Indian law.
• Safety: In genuine emergencies involving a risk to life, we may share necessary information with emergency services.

7. Data Retention

• Account data: retained for as long as your account is active, plus 30 days after deletion.
• Published content: retained indefinitely as part of the public archive. If you delete your account, your byline is anonymised, but published articles may remain in the archive.
• Newsletter subscriptions: retained until you unsubscribe.
• Server logs: up to 90 days.
• Analytics data: governed by Google's and Meta's respective data retention policies.

8. Your Rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your personal data (subject to our retention obligations).
• Portability: request your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdrawal of consent: where processing is based on consent (e.g. newsletter), you may withdraw at any time.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

9. Security

We implement industry-standard technical and organisational measures to protect your data: HTTPS for all data in transit, password hashing (bcrypt), and access controls on our infrastructure. We commit to notifying affected users promptly in the event of a breach that poses a risk to their rights.

10. Children

Bodhi Commons is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If we become aware that we have done so, we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be notified via the newsletter and a notice on the site for at least 30 days before taking effect.

12. Governing Law and Complaints

This policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Data Protection Board of India.

We would always prefer to resolve concerns directly first - please write to [email protected].

See also: Terms of Service · Editorial Policy