Website Privacy Policy

1. What this covers

This policy is about the website at www.dhinovatech.com — the pages you are reading right now. Each app we publish has its own policy covering what that app does on your device; this page does not replace them.

The site is a set of static pages. There are no accounts, no logins, and no forms that submit anywhere.

2. Analytics and cookies

We use Google Analytics 4 to see which pages people read and which languages get used. We also run two advertising measurement tags, Google Ads and Microsoft Advertising UET, so that we can tell whether the ads we pay for actually bring anyone here. Those three are the whole list.

Where you are reading from decides what happens before you answer the notice. In the EU/EEA, the UK and Switzerland, analytics storage starts denied: nothing is stored and no analytics cookie is set unless you press Accept. Everywhere else it starts granted, and the notice is there so that you can turn it off — press Decline and it stops.

Google works out which of those applies from the request itself. These pages do not look up, derive or store your location in order to decide, and the notice is shown to everyone either way.

What does not change: Decline always means no analytics data is collected, and the site works exactly the same. With JavaScript turned off nothing runs at all — no notice, no analytics.

The advertising tags follow the same rule as analytics, for the same reason. In the EU/EEA, the UK and Switzerland they start denied and stay denied unless you press Accept. Everywhere else they start granted and Decline turns them off. Accepting lets them set a cookie, which is what makes it possible to tell that an advert led to a visit rather than guessing at it.

One advertising setting is never granted, wherever you are and whatever you answer: ad personalisation. That is the one that would build a remarketing audience and follow you to other sites. We measure whether an advert worked; we do not profile the person who clicked it, and there is no answer to this notice that changes that.

One exception is worth naming rather than glossing over. Before you have answered at all, and while advertising is denied, Microsoft's tag still stores a short session marker on your device: a _uetsid cookie, plus _uetsid and _uetsid_exp in local storage. It carries no visitor ID — the value is empty where an ID would be — and Microsoft's persistent visitor cookie is not set, so it is not used to recognise you on a later visit. It is the tag's own behaviour rather than a setting of ours, and it is why this notice does not tell you that declining stores nothing.

Your choice is remembered in your browser's local storage under the key dhin-consent so we do not ask again, next to dhin-consent-notice, which records which version of this notice you answered. When a change to what we collect makes the notice say something new, that second key is what brings it back — your existing answer keeps applying in the meantime. Clearing your browser storage for this site resets both and the notice returns.

3. What the tags receive

While analytics is running, Google Analytics receives the usual page measurement data: the page URL, referrer, approximate location derived from your IP address, device and browser type, and how long you stayed. We use it in aggregate.

We do not collect your name, email address or any other detail that identifies you personally, because the site never asks you for one. IP addresses are handled by Google Analytics 4, which does not log or store them in full.

The advertising tags receive less: the address of the page, the page that referred you, and the IP address and browser details that any request to any server carries. They are also told when you click through to a store listing, and which app it was for, because that click is the only thing we can count — whether you then install anything happens inside the store, where we cannot see it and are not told.

While advertising is denied, that is all it is: an event, with nothing to attach it to. Once you accept, the same information can be tied to the click on the advert that brought you, which is the entire point of accepting and the only thing the cookie is for. It still does not produce an advertising profile, because ad personalisation stays off.

Google acts as our processor for this data. See Google's privacy policy, how Google Analytics handles data and the Microsoft privacy statement.

4. Hosting

The site is served as static files by GitHub Pages. Like any web host, GitHub processes request logs, including IP addresses, to deliver pages and defend against abuse. That happens whether or not you consent to analytics, because it is how the page reaches you at all.

See GitHub's privacy statement.

5. Other third parties

Page styling and icons are loaded from the jsDelivr CDN, and the Inter typeface from Google Fonts. Requesting a file from those services exposes your IP address to them, as it does for any file your browser fetches. Neither is used to track you. Apart from those two and the measurement tags in section 2, no external service is contacted.

Links to Google Play, the Microsoft Store and other sites take you to services with their own policies, which we do not control.

6. If you email us

Writing to [email protected] means we hold your message and address for as long as it takes to answer you and keep a record of the conversation. We do not add you to a mailing list — we do not have one.

7. Your rights

If you are in the EU/EEA or UK, the GDPR gives you rights of access, rectification, erasure, restriction, objection and portability over personal data we hold. In practice the only personal data we ever hold is an email you chose to send us, plus consented analytics that is not tied to your identity.

Our lawful basis for analytics is your consent, which you can withdraw at any time by the method in section 2. Our basis for answering your email is our legitimate interest in replying to you.

Advertising has the same lawful basis as analytics, and the same way to withdraw it: it runs on your consent where consent is required, and section 2 says how to change your answer. Ad personalisation is never granted, so no advertising profile of you is built either way. What is recorded is described in sections 2 and 3.

To exercise any of these rights, write to [email protected]. You also have the right to complain to your local data protection authority.

8. Policies for the apps

Each app has its own policy covering what it does on your device. Nothing on this page overrides them:

• GlowCompare Skincare Tracker — Android
• Notelock — Windows
• Slouch Guard — Windows
• AES Vault — Windows
• Mortgage Loan EMI Pro Insights — Windows
• Milk Monthly Expense Calendar — Android
• GlowCompare Skincare Tracker — Windows

9. Changes

When this policy changes, the effective date above changes with it. If a change affects what is collected or on what basis, the consent notice will be shown again.

10. Contact

Dhinova Tech — [email protected]. That address reaches a person, not a ticket queue.