This policy explains what My Web Presence collects, why we collect it, who else can see it, and what you can do about it. We have tried to write it in plain language rather than in legal boilerplate.
What we collect
Information you give us
- Account details - your name, username, and email address. Your password is never stored in a readable form; we keep only a cryptographic hash of it.
- Profile content - anything you choose to put on your page: job title, bio, photo, phone number, WhatsApp number, website, address, date of birth, skills, services, social links, custom links, and a UPI ID if you add one.
- Security settings - if you turn on two-factor authentication, we store the secret your authenticator app uses and hashes of your recovery codes.
Information we collect automatically
- Page views - when someone opens your public profile, we record the visit with the referring website and the browser's user-agent string, so we can show you view counts and where visitors came from.
- Link clicks - we count clicks on the custom links on your page.
- Server logs - our host records standard request logs, including IP addresses, for security and troubleshooting.
Information other people give us about you
- Enquiry messages - if you enable the enquiry form, the name, email address, phone number and message a visitor submits are stored so you can read them in your dashboard.
- Reports - if someone reports a profile, we keep the report so we can review it.
We do not use advertising or cross-site tracking. There is no Google Analytics, no advertising pixel, and no third-party tracker on this site. View counting is done by us, on our own server, and the results are only shown to the owner of the profile.
How we use it
- To publish your profile page and generate its share image.
- To sign you in and keep your account secure.
- To show you your own analytics.
- To deliver enquiry messages sent to you.
- To send service email - verification, password reset, and notices about your account.
- To investigate abuse reports and enforce our Terms & Conditions.
We do not sell your personal data, and we do not share it with advertisers.
What is public and what is not
This is the most important distinction on this page, so it is worth being blunt about it.
Public: everything on your published profile page. Anyone with the link can see it, search engines can index it, and messaging apps show a preview of it. That includes any phone number, address or date of birth you have added.
Not public: your email address, your password, your two-factor settings, your analytics, the enquiry messages sent to you, and any profile you have set to private.
You can make your profile private at any time from your dashboard. Doing so removes it from our sitemap, but search engines may keep a cached copy for a while afterwards - that part is outside our control.
Cookies
We use as few cookies as the site can function with:
- A session cookie, so you stay signed in as you move between pages.
- A security token cookie, which protects forms against cross-site request forgery.
Both are strictly necessary for the site to work. We set no advertising, profiling or analytics cookies. Public profile pages set no cookies at all unless you are signed in.
Third parties we rely on
Running the site means some other companies necessarily process data on our behalf or receive a request from your browser:
- Our hosting provider stores the database and files, and keeps server logs.
- Google Fonts and jsDelivr serve the fonts and stylesheets used by the site. When your browser fetches those files, those services receive your IP address and browser details. They do not receive your account information.
- Our email provider delivers verification, password reset and notification email, and therefore processes your email address.
We may also disclose information where we are legally required to, or where it is necessary to protect our rights or someone's safety.
How long we keep it
- Account and profile data - for as long as your account exists.
- Analytics - view and click records are kept so your historical charts remain meaningful, and are deleted with your account.
- Enquiry messages - until you delete them, or until your account is deleted.
- Password reset and email verification tokens - these are stored hashed and expire shortly after they are issued.
- Backups - encrypted-at-rest database backups are kept on a short rotation. Deleted data can persist in a backup until that backup ages out.
Your choices and rights
- See and correct your data - everything about your profile is editable from your dashboard.
- Export your data - your account settings include an export that gives you a machine-readable copy of your profile and its content.
- Delete your account - this removes your profile and its content from the service.
- Make your page private - without deleting anything.
- Object or complain - write to us at the address below.
If you sent an enquiry message to someone's profile and want it removed, contact the profile owner, or write to us and we will help.
How we protect it
- The whole site is served over HTTPS.
- Passwords are stored as salted hashes, never in plain text.
- Optional two-factor authentication using an authenticator app.
- Password reset and email verification links are stored as hashes, expire quickly, and are single-use.
- Repeated failed sign-in attempts are rate limited.
- Forms are protected against cross-site request forgery, and content you publish is sanitised before it is displayed.
No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authority as required by law.
Children
The service is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, please contact us and we will remove it.
Changes to this policy
We may update this policy. The date at the top of the page shows when it last changed. If a change materially affects how we handle your data, we will tell you by email or in the dashboard rather than relying on you to re-read this page.
Contact and grievances
For any question about this policy, to exercise any of the rights above, or to raise a grievance about how your data has been handled, write to:
We aim to acknowledge grievances within 24 hours and to resolve them within 15 days.