Privacy
What this website collects, what it deliberately does not, and what happens to anything you send us.
Who is responsible
Hikarit Labs Private Limited is a private limited company incorporated in India. We are the data controller — the “data fiduciary”, in the language of Indian law — for the personal data described in this policy.
Our registered office is Indure House, LGF & 2nd Floor, Savitri Cinema Complex, GK-II, New Delhi, Delhi 110048, India. You can reach us about anything on this page at support@hikaritlabs.com.
What this policy covers
This policy applies to hikaritlabs.com and nothing else. It is our studio website — pages describing who we are and what we do.
We also build and operate our own products — Sportzzbook, yelefile, yelepaise — and each of those runs on its own domain, collects its own data, and publishes its own privacy policy. Nothing on this page describes or applies to them. If you use one of those products, read the policy on that product's site.
This site sets no cookies and runs no analytics
That is a design decision, not an oversight. Concretely, on this website there is:
- No cookie of any kind — none for analytics, advertising, personalisation or sessions. There is nothing to consent to, which is why you were not shown a cookie banner.
- No analytics or measurement script. We do not know how many people visited a page, how far they scrolled, or where they came from, beyond what the raw server logs described below happen to contain.
- No advertising pixel, social widget, tag manager, session recorder or fingerprinting script.
- No third-party fonts, stylesheets, scripts or CDN. Every file the page loads is served from our own domain, so opening this site does not announce your visit to anyone else.
- No embedded video, map, chat bubble or comment system.
- No accounts, no logins, no user profiles. There is nothing here to sign in to.
The site is a set of static files. If you use the light and dark toggle, your preference is stored by your browser on your own device so the page does not flash the wrong theme next time. That value stays in your browser, is never transmitted to us, and clearing your browser data removes it.
Server logs
Serving a website means running a web server, and a web server keeps access logs. Ours run on infrastructure we rent from a hosting provider, and each request writes one line recording:
- the IP address the request came from
- the date and time of the request
- the path requested, the method, the response status and the number of bytes sent
- the user agent string your browser sends, which identifies the browser and operating system
- the referring page, when your browser sends one
We keep these logs for 30 days. After that they are rotated out and deleted. We use them for exactly two things — keeping the site online and keeping it secure. That means diagnosing errors and broken links, understanding load, and identifying abusive traffic such as vulnerability scans, credential probes and denial-of-service attempts.
We do not use logs to build a profile of you, we do not track you across other sites, and we do not combine log data with anything else we hold. If you are in the EU or the UK, our lawful basis for this processing is our legitimate interest in operating and securing our own website.
Information you send us by email
If you write to us, we receive whatever you choose to put in the message — typically your name, your email address, your company, and a description of what you are working on. Some people attach documents; some include a phone number in a signature. We only ever have what you chose to send.
We use it to reply to you, to work out whether we are a good fit for what you need, and — if we go ahead — to carry out the engagement. That is all.
- We do not sell, rent, or trade it.
- We do not add you to a marketing list. We do not run a newsletter, and we will not email you about anything other than the matter you wrote to us about.
- We do not use it to train models, and no automated system makes decisions about you.
We keep correspondence for as long as the enquiry is live, and for the duration of any engagement that follows it. Where a project results in a contract, we keep the related records for as long as Indian tax and company law requires us to. Enquiries that do not lead anywhere are deleted once it is clear there is nothing to follow up. You can ask us to delete your correspondence sooner, and we will, unless we are legally required to keep a specific record.
Our email is hosted by a third-party email provider, which processes messages on our behalf in order to deliver and store them.
Who else sees your data
We do not sell personal data, and we do not share it for anyone else's marketing. It reaches other parties only in these cases:
- Service providers. Our hosting provider and our email provider necessarily process data in order to run the server and carry the mail. They act on our instructions and may not use it for their own purposes.
- Professional advisers. Accountants or lawyers, where a matter genuinely requires it.
- Legal obligation. Where a valid legal requirement or court order compels disclosure. We will not hand over more than is required.
Some of these providers operate servers outside India. Where data is processed abroad, we rely on the contractual protections in our agreements with those providers.
How we protect it
The site is served only over an encrypted connection. Access to the server and to our mail is limited to the people in the studio who need it, and is protected by strong authentication. We keep the amount of personal data we hold deliberately small, because data you never collected cannot leak. No system is perfectly secure, and we will not pretend otherwise — but if a breach ever affected your data, we would tell you and the relevant authority as the law requires.
Your rights
In India, under the Digital Personal Data Protection Act, 2023
- Ask for a summary of the personal data we hold about you and how we are processing it.
- Ask us to correct, complete or update anything inaccurate.
- Ask us to erase your data, where we are not required to keep it.
- Withdraw consent, where our processing rests on consent — as it does for correspondence you chose to send us.
- Raise a grievance with us, and nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
In the EU or the UK, under the GDPR
- Access — a copy of the personal data we hold about you.
- Rectification — correction of anything inaccurate or incomplete.
- Erasure — deletion, where we have no overriding reason to keep it.
- Restriction — a pause on processing while a dispute about it is resolved.
- Objection — to processing we carry out on the basis of legitimate interest, including our server logs.
- Portability — a machine-readable copy of data you provided to us.
You also have the right to complain to your data protection authority. We would rather you told us first, so we can fix it.
How to exercise any of this
Email support@hikaritlabs.com and say what you want. It goes to the people who run the studio, not to a ticket queue. We will acknowledge it quickly and answer within 30 days. We may need to confirm you are who you say you are before acting on a request, and we will ask for no more proof than the request warrants.
One honest limitation — server logs are not organised by person and contain no name or account. If all we hold about you is an IP address in a log, we will usually have no way to connect it to you, and we will tell you so rather than guess.
Children
This site is a business-to-business studio website. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, write to us and we will delete it.
Changes to this policy
If our practices change, we will publish the revised policy at this address and change the effective date below. Where a change materially affects how we handle personal data, we will note what changed at the top of this page and leave that note up for a reasonable period. There is no mailing list for us to announce it on — this page is the announcement.
Contact
Privacy questions, requests and grievances all go to the same place — support@hikaritlabs.com, or by post to Hikarit Labs Private Limited, Indure House, LGF & 2nd Floor, Savitri Cinema Complex, GK-II, New Delhi, Delhi 110048, India.