Privacy policy

This is a personal site where I write about digital and AI work inside hospitals. It collects very little. This page sets out exactly what it collects, why, who else touches it, and how to make me delete it.

Last updated: 3 October 2026

Who runs this site

gauravphogat.com is written and run by me, Gaurav Phogat. It is a personal site — my own writing, published in my own name. Nothing here is sold, and there is no account to create. If anything on this page is unclear, or you want something changed or removed, email me at [email protected].

What this site collects

Five things, and only five.

Analytics about pages. The site runs Google Analytics 4, loaded through Google’s Site Kit plugin. It records which pages get read, roughly where in the world a reader is, what kind of device and browser they used, and which site or search sent them. I use it to see which pieces are worth writing more of.
Your email address, if you hand it over. The free guides, checklists and the newsletter use a short form that asks for an email address and nothing else. You confirm the address by clicking a link I email you, and then the guide you asked for arrives. The address is stored on this site, in the newsletter plugin, and used only to send what you signed up for and occasional emails from me. Every email has an unsubscribe link.
A comment, if you leave one. Some articles accept comments. The form asks for a name, an email address and the comment. The name and comment are published once I approve them; the email address is never shown. Spam checks run on this site, not through an outside service.
Push notifications, only if you allow them. If you click allow on the notification prompt, your browser gives this site a subscription address so it can tell you when something new is published. Nothing else is collected, and you can switch it off at any time in your browser settings.
Whatever you put in an email to me. If you write to me, I have your address and whatever you chose to tell me.

That is the lot. There is no contact form — the contact page gives you my email address instead. I do not ask for your name, your employer, your phone number, or anything about your health.

Cookies and similar technologies

When you first visit, a small banner asks whether you are happy for analytics cookies to be used. Google Analytics does not load at all until you choose Accept, so if you reject or ignore the banner, no analytics cookies are set and your visit is not measured. Your choice is saved in your own browser, and you can change your cookie choice at any time. Beyond that choice, what you may pick up comes from two places:

Google Analytics, only if you accept, sets its own cookies in your browser — the _ga family — so it can tell a returning reader from a new one. Block them, or run a tracker blocker, and nothing on this site breaks.
GTranslate powers the language switcher and loads from GTranslate’s CDN. If you actually pick a language it stores that choice so pages stay translated. If you never touch it, it never does.

Pages are served through caching — LiteSpeed on the server, with Hostinger’s CDN in front of it. Caching does not identify you; it keeps a copy of the page so it loads faster.

Who else touches any of this

Hostinger hosts the site and runs the CDN in front of it. Like any web host, its servers log requests — IP address, time, page, browser — as part of serving and protecting the site. Those logs belong to the host and are kept under its own retention policy. I do not mine them.
Google runs the analytics. The measurement data lives in Google Analytics under Google’s terms.
Google also runs the mailbox behind my contact address, which is a Gmail address. Any email you send me therefore sits in Google’s mail service, the same as most email anyone sends.
GTranslate serves the translation widget, so its CDN sees your browser asking for that file.

That is the whole list. No advertising networks, no data brokers, no remarketing pixels, no third-party comment system.

What I do not do

I do not sell your data, and I do not rent or trade it.
I do not pass your email address to anyone else, and I do not add people to the list who did not ask.
I do not try to work out who an individual reader is from analytics. I could not, and I am not interested.
I do not run ads on this site.

How long things are kept

Your email address stays on the list until you unsubscribe or ask me to remove it. Then it goes.
Emails you send me stay in my mailbox as long as the conversation is worth keeping.
Analytics data sits in Google Analytics under the retention setting on that property. I do not copy it into a separate database.
Server and CDN logs are kept and rotated by the host under its policy, not mine.

Your rights, and how to use them

Wherever you are reading from, you can ask me what I hold about you, ask me to correct it, ask me to delete it, or tell me to stop using it. If you are on the list you can also just unsubscribe. There is no form and no ticket queue — email [email protected], say what you want, and I will do it and tell you when it is done.

I am based in India, so India’s Digital Personal Data Protection Act, 2023 is the law that applies to me, and the rights above are broadly the ones it gives you: access, correction, erasure, grievance redressal, and withdrawal of consent you previously gave. If you are reading from the EU, the UK, California or anywhere else with its own privacy law, you may have rights under that law as well. Ask for whichever ones you want — I am not going to argue about jurisdiction over a mailing list.

If this page changes

If what the site does changes — a new form, a different analytics setup, an email tool — I will rewrite this page and move the date at the top. There is no archive of old versions. The one you are reading is the one that applies.