Skip to content
Privacy

Your data, in plain English.

What this site collects, why, where it lives and how to get rid of it. I've kept the legalese out wherever I could.

Last updated

aatmanjain.comp. 1

Privacy notice

  • Stats only with a yes
  • No ads, no selling
  • Delete on request
4 Oct 2026

The short version

  • I only collect what you type into a form, plus analytics if you say yes.
  • I don't sell your data, use it for ads or build profiles of anyone.
  • Base44 hosts the site and stores the data for me.
  • Want something deleted? Email hello@aatmanjain.com and it's gone.

Who's behind this site

tl;dr: Me. Aatman Jain, in Belfast.

This site, aatmanjain.com, is run by me, Aatman (AJ) Jain, in Belfast, Northern Ireland. I decide what happens to the data it collects, so I'm the one responsible for it.

For anything to do with your data, email hello@aatmanjain.com.

What I collect, and why

tl;dr: What you type in, plus analytics if you say yes.

  • Contact form. Your name, email, the reason you picked, an optional link and your message. The site also saves which page you sent it from, your browser's user agent (the bit of text that says which browser and device you're on) and how you found the site: the site you came from and any campaign tags in the link. If you've said yes to analytics, it adds your random visitor and session IDs, the page you landed on, how many visits and pages that took, and how you first found the site. Why: so I can read your message, reply, and see which places bring people who get in touch.
  • Newsletter. Your email address, where you signed up (the footer or the newsletter page, say), whether you're still subscribed, and a random code that makes the unsubscribe link in your emails work for you alone. Why: to send you the weekly newsletter (new posts, what I've built, Base44 and AI news and free resources), because you asked me to.
  • Reactions. When you tap an emoji on a case study or a post, the site saves which emoji and which page. Nothing that identifies you. Why: to show the counts.
  • Analytics, only if you say yes. Which pages you view, how long you actively spend on them and how far you scroll, which sections you see, what you click (including clicks that do nothing, or lots of clicks in one spot), when you copy something (what kind of thing and how long, never the text itself), how far you get through a form (which field, whether it's filled and any error, never what you type), how fast pages load, and any errors the site runs into. Plus the context of the visit: the site you came from, campaign tags in the link, your device type, operating system, browser, screen and window size, connection type, language, time zone and the country it suggests, your local time of day, and settings like dark mode or reduced motion. All of it sits under a random visitor ID and session ID, never your name. Why: so I can see what people actually read, what works and what's broken.
  • Base44's page-view stats, with the same yes. Base44, the platform this site runs on, records which pages are viewed, the page you came from, how long a visit lasts and a random session ID.
  • Session recordings, only if you switch them on. Microsoft Clarity records how the pages get used (mouse movement, clicks, taps and scrolling) so I can replay visits and see heatmaps. Anything you type into a form is masked. Why: to find the confusing bits and fix them.
  • No IP address. This site doesn't store your IP address. Your country is only estimated from your browser's time zone.
  • Server logs. Like almost every website, the servers that deliver these pages may log technical details such as your IP address. That's handled by the hosting platform.

I don't sell your data, I don't use it for advertising and I don't build profiles of anyone. Changed your mind? Use "Cookie settings" at the bottom of any page.

Cookies and similar storage

tl;dr: Only the essentials, unless you say yes.

This site doesn't set any cookies of its own. It keeps a few small notes in your browser's local storage and session storage instead, which work a lot like cookies, and the law treats them the same way. So here's all of it.

Necessary storage keeps the site working, so it's always on. The optional kinds stay off until you say yes:

  • Analytics: my own stats (pages, clicks, scrolling, speed and errors), plus Base44's page-view stats and usage logs, so I can see which pages people actually read.
  • Session recordings: Microsoft Clarity replays and heatmaps, with anything you type masked. Clarity sets its own cookies.
  • Embedded content: the Cal.com booking calendar on /book. Cal.com sets its own cookies when the calendar loads, so it waits for a yes, either from the cookie banner or from the "Load the calendar" button.
NameSet byWhat it's forCategoryHow long
aj:consentThis siteRemembers your cookie choices and when you made themNecessaryUntil you change or clear them
aj:scroll-positionsThis sitePuts you back where you were when you go back a pageNecessaryUntil you close the tab
aj:announcement-dismissedThis siteRemembers that you closed the announcement barNecessaryUntil you close the tab
aj:chunk-reloadThis siteStops a reload loop if part of the site fails to load just after an updateNecessaryUntil you close the tab
aj:throttle:*This siteYour last few form sends, to slow down spamNecessaryUntil you clear it. Entries stop counting after 15 minutes
aj:subscribedThis siteEmails you've subscribed with from this browser, so the form can say you're already on the listNecessaryUntil you clear it
aj:reactions:v1This siteWhich emoji reactions you've sent, so each one only counts onceNecessaryUntil you clear it
aj:analytics-offThis siteSwitches analytics off on this device. Set when I sign in, or by opening any page with ?notrack=1NecessaryUntil you clear it
base44_access_token, tokenBase44Keeps you signed in. Only set if you sign in, which in practice means me, in the admin panelNecessaryUntil you sign out
aj:visitorThis siteA random visitor ID, when you first and last visited, how many visits and how you first found the siteAnalyticsUntil you clear it. Deleted straight away if you say no
aj:sessionThis siteA random session ID, the page you landed on, where you came from and when you were last active, so one visit hangs togetherAnalyticsUntil you close the tab. Deleted straight away if you say no
Analytics events (nothing else stored in your browser)This site, on Base44The pages, clicks, scrolling, speed, errors and visit details listed aboveAnalytics14 months, then deleted
base44_analytics_session_idBase44A random ID that groups the page views of one visitAnalyticsUntil you clear it. Deleted straight away if you say no
Page-view and usage logs (nothing stored in your browser)Base44Which pages are viewed, the page you came from and how long a visit lastsAnalyticsAs long as Base44 keeps them
_clck, _clskMicrosoft ClarityA random Clarity user ID and session ID, so a recording hangs togetherSession recordings_clck up to a year, _clsk a day. Deleted if you say no
Clarity's own cookies on clarity.ms, such as CLID and MUIDMicrosoftRecognise your browser across sites that use ClaritySession recordingsSet by Microsoft
Cal.com's own cookies, such as __cf_bmCal.comRun the booking calendar and keep it secure (__cf_bm is a bot check)Embedded contentSet by Cal.com. __cf_bm lasts 30 minutes

Cal.com and Microsoft decide which cookies they set and for how long, and they can change them. Their privacy policies (Cal.com (opens in a new tab), Microsoft (opens in a new tab)) have the details.

Changing your mind. Use "Cookie settings" at the bottom of any page, or the button below, to switch things on or off whenever you like. Saying no to analytics stops it straight away and deletes the IDs in your browser. Saying no to session recordings stops Clarity and deletes its cookies on this site, but I can't delete the ones on clarity.ms, so clear those in your browser settings if you want them gone. Saying no to embedded content stops the calendar loading, but I can't delete cookies Cal.com has already set, so clear those in your browser settings if you want them gone.

Global Privacy Control. If your browser sends a Global Privacy Control (opens in a new tab) signal, I treat it as "reject all" and don't show the banner. You can still switch things on yourself from Cookie settings.

No advertising cookies, ever, and no cross-site trackers unless you switch on session recordings. The fonts and the Logo.dev logos don't set any cookies either. Base44 may use its own strictly necessary cookies to run the platform, for example to keep me signed in to the admin panel.

Your cookie settings

What this browser has agreed to, right now. It updates live.

  • NecessaryAlways on
  • AnalyticsOff
  • Session recordingsOff
  • Embedded contentOff

Not chosen yet, so everything optional is off.

Forget me on this device

Clears everything this site has asked your browser to remember, your cookie choices included (so you'll be asked again). It doesn't touch anything already sent, like a message or a newsletter signup. For those, email me.

0 notes stored in this browser

    Nothing stored right now. Clean slate.

    Who else handles it

    tl;dr: Base44 hosts it and Resend sends the newsletter. Logo.dev serves some logos. Microsoft and Cal.com, only if you say yes.

    • Base44 hosts the site and stores everything above in its database, on my behalf. Their privacy and security page (opens in a new tab) explains how they look after it.
    • Fonts. The typefaces are served from this site. Some browsers may still get them from Google Fonts, and then Google receives your IP address, as with any web request.
    • Logo.dev serves some of the tool logos. Your browser loads those images from Logo.dev's servers, so Logo.dev receives your IP address, as with any image on the web.
    • Resend sends the newsletter for me, so it receives your email address and the email it delivers, and tells me whether each one was accepted. I haven't switched on open or click tracking. See Resend's privacy policy (opens in a new tab).
    • My email provider handles my replies, when I write back to you.
    • Microsoft Clarity, only if you switch on session recordings. Microsoft records and stores the replays for me, as my processor, and receives your IP address, as with any web request. See Microsoft's privacy statement (opens in a new tab).
    • Cal.com, only if you load the booking calendar on /book. If you book a call through it, Cal.com's own privacy policy applies.

    Some of these providers may store data outside the UK.

    How long I keep it

    tl;dr: No longer than I need to.

    • Messages: until we've finished talking, then for up to 12 months in case we pick things back up. If we end up working together, for as long as the work needs.
    • Newsletter: until you unsubscribe (one click, from the link at the bottom of any issue). After that I keep the address marked as unsubscribed, only so I never email you by mistake. Ask and I'll delete that too.
    • Reactions: kept as anonymous counts.
    • Analytics: 14 months, then deleted.
    • Base44's page-view stats: for as long as Base44 keeps them.
    • Session recordings: for as long as Microsoft Clarity keeps them (currently 30 days for recordings).
    • Your cookie choices: in your browser, until you change them or clear this site's data.

    The legal bit

    tl;dr: You asked, or I have a fair reason.

    UK GDPR says I need a lawful basis for using personal data. Here are mine:

    • Newsletter: your consent. You can withdraw it any time by unsubscribing.
    • Analytics, session recordings and the booking calendar: your consent, given in the cookie banner. Withdraw it any time with "Cookie settings" at the bottom of any page.
    • Contact form: legitimate interests. You got in touch, and replying is the whole point.
    • Spam protection and reactions: legitimate interests, in keeping the site working, secure and worth reading.

    Your rights

    tl;dr: See it, fix it, delete it, or complain.

    Under UK GDPR you have the right to:

    • ask for a copy of the data I hold about you
    • have anything wrong corrected
    • have your data deleted
    • object to, or ask me to restrict, how I use it
    • get your data in a format you can take elsewhere
    • withdraw your consent, for example by unsubscribing or changing your Cookie settings

    To use any of these, email hello@aatmanjain.com from the address you used, so I know it's you. I'll reply within one month, which is what the law asks for.

    Not happy with how I've handled something? You can complain to the Information Commissioner's Office (ICO) (opens in a new tab).

    Getting your data deleted

    tl;dr: Email me. That's it.

    Email hello@aatmanjain.com and tell me what to delete: a message you sent, your newsletter signup, or everything. I'll delete it and confirm when it's done.

    For the newsletter, unsubscribing works too. For anything stored in your browser, use the "Clear this browser" button in the cookies section, or clear this site's data in your browser settings.

    Under 13?

    tl;dr: Ask a parent first.

    This site isn't aimed at young children. If you're under 13, please ask a parent or guardian before you send a message or sign up to anything.

    Changes to this notice

    tl;dr: New date at the top.

    If anything here changes, I'll update this page and the date at the top. If it's a big change that affects newsletter subscribers, I'll mention it in the next email.