Privacy

Last updated 23 October 2026. Written in plain language, not reviewed by a lawyer.

What this site collects

Browsing this site sets no cookies (only the private admin login does, see below) and runs no analytics, ads or third-party scripts. The site's security policy stops pages from loading anything from other servers. I have applied for Google AdSense; see Ads below for what will change if it is approved.

Your browser's local storage keeps a few small settings that never leave your device: whether you have seen the intro animation, your last Pixel Weather city, your Sky Hop best score, your Pixel Doodle name and colour, and anything you write in Pixel Notes. Clearing site data removes them, so keep a backup of notes you need.

The contact form

If you send a message, I store your name, email address, the message and the time it was sent, so I can read it and reply. To limit spam, I also store a one-way keyed hash (HMAC-SHA-256) of your IP address, mixed with the current date. Without the site's secret key it can't be turned back into your IP address. It is only used to count how many messages one sender has sent recently.

Your name, email and message are encrypted before they are saved (AES-256-GCM, with a key that is never stored next to the data), so even someone who could read the database would only see scrambled text. They travel to the site over HTTPS only. I also get a copy by email so I don't miss it.

Messages are kept in a Cloudflare D1 database for at most 180 days, then deleted automatically. The IP hash is wiped after 2 days. Only I can read messages. To have yours deleted, ask through the contact form.

Pixel Weather

When you search a city or load a forecast on /weather, the request goes to this site, which asks Open-Meteo on your behalf. Open-Meteo receives the place name or the coordinates rounded to about 1 km, never your IP address. Searches are not logged or stored, apart from a short cache of the weather answer itself. The app only asks for your location if you press My location. Your browser asks you first, and the coordinates are rounded to about 1 km before they leave your device. The last city you looked at is saved in your own browser (local storage) so it opens there next time. It never leaves your device, and clearing site data removes it.

Now playing

When I'm listening to music, the About card can show the song title, artist and album art from my own Spotify. It only reads what is playing right now, nothing about you, and nothing is stored. Album art is loaded through this site, so your browser never contacts Spotify. I can switch this off at any time.

Live cricket

The live cricket scores come from CricketData.org. This site fetches them on its own schedule and shares one copy with every visitor, so your browser never contacts the score provider and nothing about you is sent or stored.

Higher or Lower: India

The game on /daily keeps your scores and streak only in your own browser. Nothing about your play is sent anywhere.

Exam Countdown

The countdowns you add on /countdown are saved only in your own browser. Calendar files are made on your device.

Sky Hop

The game on /play saves your best score in your own browser (local storage). It is never sent to this site or anyone else. Clearing site data removes it.

Pixel Doodle

In a Pixel Doodle room, the name you type, your colour, your guesses, chat and drawings go through this site to the other players in that room. They are kept only in the room's memory while it is open and are never written to a database or log. A room and everything in it disappears when everyone has left, or after 20 quiet minutes. Only people with the room's link or code can join, and the host can remove anyone.

Pixel PDF and the photo tools

Files you open in the tools on /pdf (PDFs and photos) are read, changed and saved inside your own browser. They are never uploaded to this site or anyone else, and nothing about them is stored. The code that does the work is served from this site. These pages never show ads, even if ads appear elsewhere on the site. Wi-Fi passwords and UPI IDs typed into the QR code maker stay on your device too.

Reel downloader

When you press Get video on /reels, the Reel link goes to this site, which asks Social Fetch to look the Reel up. Social Fetch receives only the Reel's code from the link, never your IP address. The video then comes to you through this site from Instagram's servers, so Instagram doesn't see your IP address either. Links are not logged or stored; the only thing counted is how many lookups happen each day, with no link or visitor attached. The download link expires after 15 minutes. Nothing is read from your clipboard unless you press Paste link, and your browser asks first. You never sign in to Instagram here.

Buy me a coffee

The page on /coffee shows a UPI QR code and a UPI link. Paying happens entirely in your UPI app, between you and the banks; this site never sees who paid, how much or whether you paid at all.

Short links

When you open a short link like shaurya.fun/s/github, the site counts the click and records the time of the last click, then sends you to the saved address. It does not store your IP address, browser, device or where you came from, and it tells your browser not to pass the short link on as a referrer.

The link admin page is private and only I can sign in. Signing in sets one strictly necessary cookie (__Host-links_session, HttpOnly, Secure, SameSite=Strict) that expires after 12 hours. Visitors never receive this cookie.

I have applied for Google AdSense, so the pages carry Google's site-ownership tag, but no ads are shown and no ad code loads yet. If the site is approved, the home page, Exam Countdown, Higher or Lower, Pixel Weather, Sky Hop and the Pixel Room will each show one ad from Google, below the main content, and this section describes what that means. The PDF and photo tools will stay free of ads.

Google and its partners use cookies and similar technology to show and measure these ads. They may show ads based on your earlier visits to this site and to other websites. Google's use of advertising cookies lets it and its partners serve ads to you based on those visits. Read how Google uses information from sites that use its services.

You can turn off personalised ads in Google's Ads Settings, and opt out of some other ad companies' cookies at aboutads.info. Visitors in the European Economic Area, the UK and Switzerland are asked for their consent first. An ad blocker simply leaves the ad box empty; everything else keeps working.

Hosting

The site runs on Cloudflare. Like any host, Cloudflare processes technical data such as your IP address and browser type to deliver and protect the site. See the Cloudflare privacy policy. Cloudflare may set a strictly necessary security cookie when checking for automated traffic.

When something on the site breaks, it writes a short error note: which part failed and the error message. The note never includes your IP address, your name, your email or anything you typed. Cloudflare keeps these notes for 3 days so I can fix the problem.

Contact

Use the contact form on the home page.