Search

Full-text search

Privacy notice

LimitSheet is a reference site. It counts page views with Google Analytics (which sets cookies), shows no ads and does not sell or share personal data for advertising.

Last reviewed AI-assisted review

In short

  • Page views are counted with Google Analytics, which sets cookies. It is not loaded when your browser sends Global Privacy Control or Do Not Track, or reports a European time zone. No advertising features, and personal data is neither sold nor shared for advertising.
  • The web server keeps standard access logs for security and troubleshooting; they are not used to track people.
  • If you email us, we use your address only to reply, and you can ask us to delete it.

Legal review pending

This text was written without a lawyer and has not had a legal review yet. It is not legal advice. Until that review, this page is hidden from search engines.

Who is responsible

LimitSheet is run by Lokesh Rathore, who decides how personal data on this site is handled (the “data fiduciary” under India's Digital Personal Data Protection Act and the “controller” under the GDPR). Contact and grievance officer: Lokesh Rathore, contact@limitsheet.com.

What we collect and why

  • Web server access logs. The site is hosted by OVHcloud (server in Mumbai, India). When you load a page, the web server records standard technical data such as your IP address, browser type, the page requested and the time. Standard web server access logs are kept for security and troubleshooting, not used to track people.
  • Page-view statistics (Google Analytics 4). If your browser allows it, Google Analytics records which pages you open (the page address, which can include a search you typed, such as ?q=), the page you came from, how long a page is open, how far you scroll, which links to other sites you click, which files you download, your approximate location (country and city, derived from your IP address), your device and browser type and the time. It sets two cookies, _ga and _ga_*, to tell visits apart; each lasts up to two years and is renewed when you visit again. Google processes this data on our behalf (as a “processor” under the GDPR and a “data processor” under India's DPDP Act) and may do so on its servers outside India. Google signals and advertising personalization are switched off. Google keeps event-level data for the retention period set in our Analytics account, at most 14 months; summary reports that do not identify visitors can be kept longer.
  • When analytics does not run. Analytics is not loaded at all when your browser sends Global Privacy Control or Do Not Track. It is also not loaded when your browser reports a European time zone, because the site has no consent banner. That test uses the time zone your browser reports, not where you are: if you are in the EEA, the UK or Switzerland and your browser reports another time zone, analytics can still run. Google is then told to deny analytics storage, so no analytics cookies are set, but Google may still receive a basic page-view request without cookies (page address, IP address, browser details). You can opt out everywhere with Google's opt-out browser add-on.
  • Your theme choice. If you pick Light or Dark with the theme button in the header, the choice is saved in your own browser's storage. It never leaves your device, and you can clear it at any time.
  • Emails you send. If you write to us (for example to report an error), we use your address and message only to reply and to track the report, and we keep the thread only as long as we need it to handle the request. There is no newsletter or mailing list.

Legal basis where the GDPR applies: our legitimate interest in running and securing a public reference site (access logs), and your request (emails you send). Analytics is not run for visitors whose browser reports a European time zone, and in the EEA, the UK and Switzerland it is also set to deny analytics cookies by default. The legal basis for analytics that still runs for someone there is one of the points the pending legal review will settle.

What we don't do

  • No advertising or social media widgets, no advertising features of Google Analytics, and no scripts that follow you across sites for ads. The only third-party script is Google Analytics 4; the fonts and everything else are served from this site.
  • No accounts, sign-ups or payment details. The site has no login.
  • No selling or renting of personal data, no sharing of it for advertising, and no advertising profiles of readers. The page-view data sent to Google Analytics (see above) is the only visitor data we pass to anyone else.

Your rights

You can ask for access to the personal data we hold about you, its correction or deletion, and, under the GDPR, restriction of or objection to its processing and a copy in a portable format. Under India's DPDP Act you can also seek grievance redressal from us first, and nominate someone to exercise your rights. Write to contact@limitsheet.com; we reply within 30 days. You may also complain to your data protection authority.

Children

The site is a reference for professionals and is not directed at children. We do not knowingly collect children's data.

Where data is processed

The site is hosted by OVHcloud (server in Mumbai, India), and the access logs are kept on that server. Page-view statistics are processed by Google, which may use servers in other countries. Emails you send travel through your email provider and ours, which may process them in other countries.

If this changes

If we ever add a content delivery network, email alerts or anything else that processes personal data, or change the analytics, this notice will be updated when that happens, and any sign-up will ask for your consent. The review date at the top shows when this notice was last checked.