Privacy Policy

Last updated: 2026-05-07

Mana Hyderabad ("we", "our", "us") operates manahyd.com. This policy describes what data we collect, how we handle it, and what rights you have. We aim to comply with India's DPDP Act (Digital Personal Data Protection Act, 2023) and the EU GDPR for any readers covered by it.

1. What we collect

1.1 Automatically (every visitor)

• Server logs: IP address, user-agent, referrer, request path, timestamp. Retained 30 days for security and abuse prevention, then aggregated.
• Functional cookies: consent preferences, session tokens (once you sign in), and tenant-embed flag. These are required for the site to work.
• Analytics (with consent): Google Analytics 4 collects aggregated traffic data — pages viewed, time on site, source of traffic. We never see individual reader identities through GA4.

1.2 You provide (sign-in)

To post a discussion thread, classified, real-estate listing, event, comment, or vote, you sign in via Google or Facebook OAuth. We receive from the OAuth provider:

• Your name (display name only — first + last as you set it on the OAuth account)
• Your email address
• Your profile photo URL (if any)
• The OAuth provider's user ID (so we can recognize you on subsequent logins)

We don't receive your password. We don't receive your friends list, contacts, or any other social-graph data. We don't see what you do on Google or Facebook.

1.3 You publish (UGC)

When you post a thread, classified, listing, event, comment, or vote, the content is stored along with your account ID and a timestamp. Posts are public by default — anyone can read them. If you include contact information (phone, email) in a classified or listing, that information is public and we can't recall it from caches or screenshots once posted.

1.4 Push notifications (optional)

If you opt in to push notifications, we store the browser's push subscription endpoint and keys so we can send notifications. You can revoke this any time from your browser settings; the subscription record is purged on revocation.

2. What we use it for

• Operating the site: rendering pages, authenticating sessions, accepting posts, moderating UGC, sending notifications.
• Security & abuse prevention: rate limiting, spam filtering, identifying ban evasion.
• Aggregate analytics: understanding which sections are read, which posts are popular, what to build next.
• Advertising: Google AdSense serves the ads on this site. AdSense uses cookies to serve relevant ads based on your browsing across sites that use AdSense. You can opt out at google.com/settings/ads.

3. What we don't do

• We do not sell your personal data.
• We do not share your email with advertisers, partners, or other community members. (Other community members see only your display name and avatar on your posts.)
• We do not run cross-site tracking pixels beyond Google Analytics 4 and AdSense (both opt-in via the consent banner).
• We do not perform automated decision-making with legal effect on you. Moderation decisions involve a human review step for any sustained ban.

4. Cookies

The cookies we set fall into three categories:

• Essential (no consent needed): consent preferences, session tokens, embed flag.
• Analytics (consent required): Google Analytics 4. You can change this any time via the consent banner or browser settings.
• Advertising (consent required): Google AdSense for personalised advertising. You can decline; ads still appear but are non-personalised.

5. Your rights

Under India's DPDP Act and the EU GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct any data that is wrong.
• Delete your account and associated data (UGC may be retained in anonymized form for moderation history).
• Withdraw consent at any time for analytics and advertising cookies.
• Port your posts to another platform via export (we provide a JSON export on request).

Submit any of these requests to privacy@manahyd.com. High-priority deletion requests within 7 days; everything else within 30 days.

6. Data retention

• Server logs: 30 days, then aggregated.
• Account data: until you request deletion.
• UGC (posts, comments, votes, bookmarks): kept indefinitely while your account exists; on deletion, posts are anonymized but content remains (so threads readers replied to don't break).
• Analytics data: per Google Analytics 4 default (14 months for events; aggregate metrics indefinite).

7. Children

Mana Hyderabad is intended for adults. We don't knowingly collect data from children under 13 (US COPPA threshold) or 16 (some EU member states). If you believe a child's data has been collected, contact privacy@manahyd.com and we'll delete it.

8. International data transfers

Our infrastructure is hosted on Vercel (edge-cached globally) and Turso (database, replicated across regions). Reader data for India-focused properties (this site) is stored in the AP-South region (Mumbai) closest to readers. By using the site you consent to this routing.

9. Changes to this policy

We'll update this page when we add or change a data flow. Material changes get a notice at the top of the home page for 7 days. The "Last updated" date at the top of this page tells you when it was last revised.

10. Contact

For privacy questions: privacy@manahyd.com.

For full contact details and other channels, see contact.