Privacy Policy

Most of this website can be read without giving us anything at all. You can watch talks, browse series and podcasts, and read about our events without submitting any personal information.

We collect personal information only when you choose to give it to us, in one of two places:

• Newsletter — your email address, and your name if you choose to enter one. We also store the language you were reading in, a one-time confirmation token, and a hashed (irreversible) form of your IP address, which is kept as a record of consent and to limit abuse of the form.
• Suggesting a story — the name of the person you are nominating, and optionally a city, email address and phone number, together with the story you write for us. We also store the language you were reading in, a hashed form of your IP address, and your browser identification string.

We count how many times each talk page is opened. That is a single number per talk; it is not linked to you, your device or your IP address, and it cannot be traced back to an individual.

This website sets no advertising or analytics cookies. There is no Google Analytics, no advertising pixel and no cross-site tracker anywhere on it. Your browser stores a session cookie so the site works, and, on the alternative homepage design, a light/dark preference that stays in your browser and is never sent to us.

We use what you give us for the purpose you gave it for, and for nothing else:

• Your newsletter email address is used to send you the newsletter you asked for. We use double opt-in — you receive one email asking you to confirm, and we send nothing further unless you do. Every newsletter carries a one-click unsubscribe link.
• A story you suggest is read by our editorial team so we can consider it for a talk, and we may contact you using the details you provided to follow it up.
• Administrator accounts belong to our own staff. We store a name, an email address, a securely hashed password and a role that decides what that person may do. We keep a log of changes made in the administration panel so that edits to the site can be attributed and reviewed.

We do not use any of this to build a profile of you, and we do not use automated decision-making on it.

This website uses YouTube API Services to display our own video catalogue.

The access is server-side and read-only. We authenticate with an API key that belongs to us. We never ask you to sign in with a Google or YouTube account, we do not use OAuth, and we have no access to any visitor's YouTube account, subscriptions, watch history, playlists or any other personal data held by Google.

We read only the following, and only about our own channel and its videos:

• Video details — title, description, thumbnail image address, duration, publication date, public view count, and whether the video may be embedded.
• Playlist details — a playlist title, its description and the list of videos it contains, so an episode list can be built.
• Channel statistics — the public subscriber, video and view totals shown on our homepage.

This information is all publicly visible on YouTube already. We store a copy in our own database so that our pages load quickly and keep working when the API is unavailable, and we refresh it from time to time. Cached responses are held for up to 24 hours before being fetched again.

We use this data for one purpose: presenting our own talks, series and podcasts on this website. We do not sell it, share it, use it for advertising, or combine it with anything about you.

Videos play inside our own pages using YouTube's privacy-enhanced embed (youtube-nocookie.com), which does not set advertising cookies until you start playing a video. When you do play one, YouTube receives the technical information it needs to deliver the video. That processing is Google's, and is governed by the Google Privacy Policy linked below.

Calls to the YouTube API from this website are only ever made by a signed-in administrator taking a deliberate action — importing a video, syncing a playlist, or refreshing our channel statistics. No page a visitor can open makes an API call.

The administration panel itself is behind a password and a role. Each role grants only the permissions that job needs, so someone who edits talks cannot reach subscriber or nomination records unless that permission has been granted to them.

Newsletter addresses and submitted stories are visible only to the members of our team whose role includes that permission. The API key is stored in server configuration, is never sent to a browser, and is not present anywhere in the public website.

Your information is stored in our own database on our hosting provider's servers, and is not copied to third parties except as described under "Third-party services" below.

We protect it with the following measures:

• The whole website is served over an encrypted HTTPS connection.
• Administrator passwords are stored only as a one-way hash and cannot be read back by anyone, including us.
• IP addresses attached to form submissions are stored hashed, not in their original form.
• Access to the administration panel requires an account, and sign-in attempts are rate-limited to frustrate guessing.
• Every change made in the administration panel is recorded in an activity log with the account that made it.

No system is perfectly secure, and we cannot promise absolute safety. If a breach affects your personal information, we will tell you and the relevant authorities as promptly as we reasonably can.

We keep personal information only for as long as it serves the purpose it was collected for:

• Newsletter subscriptions are kept until you unsubscribe. If you unsubscribe, we keep the record marked as unsubscribed so that we do not email you again by mistake; ask us and we will delete it outright instead.
• Unconfirmed subscriptions — where the confirmation email was never acted on — carry no consent and may be removed.
• Suggested stories are kept while we consider them and afterwards as a record of what was submitted to us. Ask us and we will delete yours.
• Administrator accounts and the activity log are kept while the account is active and for a reasonable period afterwards, so that changes to the site remain accountable.
• Cached YouTube data is public information about our own videos and contains nothing about you. It is refreshed continually and removed when the talk it belongs to is removed.

You may ask us at any time for a copy of the personal information we hold about you, to have it corrected, or to have it deleted. Write to the address at the end of this policy and we will respond within a reasonable period. Unsubscribing needs no request at all — every newsletter has a link that does it immediately.

This website relies on a small number of outside services. Each one is listed here with what it receives:

• YouTube / Google — our videos are hosted on YouTube and play through an embedded, privacy-enhanced player. When you play a video, YouTube receives the technical data it needs to serve it. We also read public information about our own channel through the YouTube Data API.
• Google Fonts — typefaces used by the site are served by Google, which means your browser requests them from Google's servers.
• Our hosting and email provider — stores the website and its database, and delivers the newsletter and notification emails we send.

We do not pass your information to anyone else, and we do not sell or rent it under any circumstances.

This website uses YouTube API Services.

By using the embedded players and the YouTube-sourced information on this site, you also agree to the YouTube Terms of Service, and your use of Google's services is governed by the Google Privacy Policy:

• YouTube Terms of Service
• Google Privacy Policy
• Google security settings

We access the YouTube Data API with our own API key only, and we never request access to a visitor's Google account. Because we ask for no such access, there is nothing for you to revoke — but if you have granted any application access to your Google account, you can review and withdraw it at the Google security settings page linked above.

We store YouTube-derived data only as described in this policy, keep cached data for no longer than the API terms permit, and delete stored copies when the content they describe is removed from our site.

This website is intended for a general audience and we do not knowingly collect personal information from children. If you believe a child has sent us personal information, please contact us and we will delete it.

We will update this page if what we collect or how we use it changes. The date at the top of the page tells you when it was last revised.

For any question about this policy, or to ask for a copy of your information or its deletion, write to us:

Email

skcodersinfotech@gmail.com

This website and the channel it presents are operated by Swayam Talks.