Privacy Policy
Curioler (“we”, “us”) operates www.curioler.com. This policy describes what personal data we collect, why we collect it, how we store and protect it, who we share it with, and your choices—including how to request deletion or raise concerns. We aim to collect the minimum needed to run the site and improve it; we are not trying to identify individuals beyond what is necessary for those purposes.
Who this applies to
This policy applies to visitors and users of our website. If you access the site from outside India, we still apply sensible data-protection practices. For readers in the European Economic Area (EEA), UK, or similar regions, we describe our practices in a way that aligns with common GDPR-style expectations (lawful basis, purpose limitation, data minimization, security, and your rights), even though our primary operations are in India.
India’s Digital Personal Data Protection Act, 2023 (DPDP Act) sets expectations for processing personal data in India. We aim to process data fairly, for specified purposes, with reasonable security safeguards, and to honor your rights where they apply.
What data we collect
- User accounts. If you sign up for an account, we collect the information you provide (such as username, email address, first name, and password). Passwords are stored using a one-way hash—we do not store your password in plain text.
- Sign in with Google. If you choose to log in or sign up using Google, Google shares with us certain profile information according to your Google account settings and Google’s privacy policy (typically including a stable identifier, name, email address, and profile picture URL). We store what we need to operate your account and show your name and avatar in the site header when you are signed in.
- Contact and communications. If you email us (e.g. via the address on our contact page), we receive your email address and the contents of your message.
- Survey / check-in. Our optional caregiver check-in may collect answers you choose to submit, an optional email address if you want a copy of your responses or newsletter-related updates, and technical data used to limit duplicate submissions and protect the service (for example, a random identifier stored in a browser cookie, and a hashed value derived from your IP address—not the raw IP stored for identification).
- Polls. If you vote in an on-site poll, we may store your choice in association with your browser session (Django session cookie) so we can show aggregate results and avoid repeat votes from the same session where implemented.
- Cookies and similar technologies. We use cookies that are needed for the site to function (for example, Django session and security-related cookies—including when you stay signed in to your account—and our survey cookie where applicable). We do not use third-party advertising cookies on this site today. We also use server-side, first-party page logging (no extra tracking scripts in your browser) to understand aggregate traffic in our own admin tools; see below.
- Internal usage analytics. For site operations we may record each page view in our database with a hashed IP, user agent, path, time, optional coarse location if we configure a GeoIP database, and related HTTP metadata. This is visible only to our staff in Django admin and is used to improve the site—not for advertising profiles.
- Server and hosting logs. Our hosting provider may process standard technical information (such as IP address, user agent, timestamps) in server logs for security and reliability.
Why we collect it
- To create and manage your account, authenticate you, and personalize what you see when signed in (such as a welcome message).
- To respond to messages you send us.
- To run optional surveys and show anonymized or aggregate insights to the community.
- To send you a copy of your check-in or updates only if you clearly opt in and provide an email.
- To operate polls, prevent obvious abuse, and keep the site secure and available.
- To improve content and usability over time.
Legal bases and fairness (including GDPR-style expectations)
Where GDPR-style rules apply, we rely on appropriate bases such as consent (e.g. optional email, newsletter opt-in), legitimate interests (running and securing the website, understanding aggregate use), and legal obligations where required. Under the DPDP Act, we process personal data for lawful purposes connected to providing this site and communicating with you when you contact us.
How we store and protect data
Data you submit through the site is stored in our application database hosted with our cloud provider (for example, Railway or similar). We use industry-standard practices such as HTTPS in production, access controls for administration, and careful handling of secrets. No method of transmission or storage is completely secure; we work to reduce risk in reasonable ways.
Sharing and third parties
We do not sell your personal data. We do not share it for third-party marketing.
We use service providers as needed to operate the site, for example:
- Cloud hosting and database providers (where the application and data reside).
- Google, when you use “Sign in with Google,” to authenticate you and receive basic profile information as described above. Google’s processing is governed by Google’s privacy policy.
- Email delivery, if configured, to send optional copies of survey responses or operational email.
- WhatsApp (Meta): Our contact page links to a public WhatsApp group. That service is operated by Meta under its own terms and privacy policy. Messages you send there are not controlled by this website’s database in the same way as on-site forms.
Retention
We keep information only as long as needed for the purposes above, unless a longer period is required by law. Survey and poll data may be retained in aggregate or anonymized form for community insights. You can ask us to delete personal data you have provided where feasible (see below).
Your rights and choices
Depending on where you live, you may have rights to access, correct, object to certain processing, or request deletion of personal data we hold about you. We will respond to reasonable requests in line with applicable law.
Deletion requests: Email us at strikeagle.lx@gmail.com with “Privacy / deletion request” in the subject line. Include enough detail for us to find your data (for example, the email address on your account or used in the check-in, and an approximate date of submission). We will confirm or complete feasible requests within a reasonable time. We may need to retain certain records where required by law or where we cannot verify or locate the data you describe.
Children’s privacy
Our site is aimed at parents and caregivers. We do not knowingly collect personal data from children as the primary audience. If you believe a child has provided personal data through our forms, contact us and we will take appropriate steps.
International transfers
Our hosting providers may process data in India or other countries. Where required, we rely on appropriate safeguards or legal mechanisms for cross-border transfers.
Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after changes means you accept the updated policy where permitted by law.
Contact for privacy concerns
For any privacy questions or complaints, contact: strikeagle.lx@gmail.com. If you are in India and applicable law provides for a Data Protection Board or other redress, you may also pursue remedies available to you under law.