Privacy policy for datadoodles

Who this notice is for

This privacy notice explains how the datadoodles storefront at datadoodles.site treats information when you browse the public pages, create a client account, search a domain, or place a hosting order. It is written for this brand and this domain. It is not a copy of another host's policy, and it is not a certificate of compliance with any statute.

datadoodles publishes shared hosting plans in Indian rupees. Do not send identity documents to a place you guess from the name. Questions about this notice go to contact@datadoodles.site or the contact form.

What this frontend actually stores

This copy of the site has no application server. Accounts, orders, tickets and contact messages are written into local storage in your browser. They do not travel to a datadoodles database, because that database is not part of this frontend. If you clear the site data, the account is gone. If you use another browser, the account is not there.

That limitation matters more than a generic promise about 'servers in the EU'. A password you type on the registration form sits in the same storage as the order list. Treat the password as a demo credential for this browser, not as a production secret. Do not reuse a banking password here.

Information you type

The registration form asks for a name, an email address and a password. The order form asks for a plan, a billing term, an optional domain and an optional coupon. The contact form asks for a name, an email, a topic and a message. The ticket form asks for a subject and a description. Domain tools ask for a hostname or a snippet of text you paste.

You do not have to create an account to read prices. You do have to log in before an order is stored. The place-order control sends you to the login page when no session exists. The page does not ask for a card number, a UPI PIN, or a one-time password, and you should leave any site that does so under this brand without a confirmed invoice.

Information the browser already has

The pages set no third-party advertising cookie. They do use local storage and, for the password reset code, session storage. A reset code is shown on the forgot-password page because this copy cannot send mail. That code is a browser convenience, not an email from contact@datadoodles.site.

Server logs, in the ordinary sense, are not produced by these static files. If you later put the same HTML behind a host, that host's access logs are a different system and should be described in an updated notice. Until then, do not assume datadoodles holds your IP address in a customer database.

How the information is used

A name and email identify the session so the account page can list your hosting orders. The plan and term calculate the INR figure, including the DOODLE10 coupon when you type it. Contact messages and tickets stay on the machine so you can see that the form accepted them. They are not forwarded. This site has no mail server for the form.

Domain searches check a short local list and a price table. They are not sent to a registry. Tool pages that pretty-print JSON or compare HTML do that work in the page. Pasting a production password or a customer export into a tool is a bad idea even when the text never leaves the browser.

What is not claimed

This notice does not claim that datadoodles is certified under the GDPR, the Indian Digital Personal Data Protection Act, or any other regime. It does not name a payment processor, a bank, or a card network as a partner. Badges on the footer that say INR, UPI, cards and net banking describe methods a future invoice might accept. They are not a receipt and not a processing agreement.

This notice does not name a company location. Location pages on the marketing site describe who the plans are for. They are not a list of branch offices, and they are not a list of places where personal data is stored.

Sharing

Because the frontend does not transmit account records, there is no routine sharing with a mail vendor, an analytics vendor, or a support desk. Fonts and icons are files on this same site. Product names such as WordPress, DirectAdmin, PHP and MariaDB appear because the plans run those tools. Mentioning them is not a disclosure of your data to those projects.

If a real service is switched on later, the operator should rewrite this section before collecting data on a server. The rewrite should name the actual subprocessors. Until that rewrite exists, staff should not ask customers to send passport scans.

Retention and deletion

Data remains until you delete it. Logging out removes the session key. It does not delete the account record. Clearing site data for datadoodles.site removes accounts, orders, tickets and contact messages from that browser. There is no central copy for the operator to erase, which is honest, and also means the operator cannot restore an order you deleted by accident.

Reset codes live in session storage and disappear when the tab session ends. The announcement bar stores a single flag so it stays dismissed. That flag is not tied to your name.

Children

The plans are sold to people who can enter a contract for hosting. The site is not built for children, and the forms do not ask for a date of birth. If you believe a child has created an account in a browser you control, clear the site data. There is no separate child profile to delete on a server.

Security expectations

Use a browser you trust. Do not leave a logged-in session on a shared computer. The password toggle only changes whether the field is visible. It does not encrypt the value at rest beyond what the browser does for local storage, which is not a security product.

The free SSL described on the plan cards is for sites you host after a real account exists. It is not a statement that this static demo has been audited. Phishing pages can copy a wordmark. Check that you are on datadoodles.site before you type a password.

Changes

If processing later leaves this browser, this notice should be updated in the same change. The meaningful change is the moment data leaves the browser. A change that only adjusts a sentence on the marketing page does not need a dramatic banner. A change that adds a server-side account system does.

Questions about this notice go through the contact form or contact@datadoodles.site. The form stores the message locally and tells you so.

Can I use the account on my phone and my laptop?

Only if you created it in each browser. There is no sync. An order placed on a laptop will not appear on a phone. Plan for that before you rely on the account page as a record. A screenshot of the confirmation is the portable copy.

Do you sell the email address I typed?

No. The address stays in local storage and is used to match the session to orders in that same storage. It is not exported, sold, or appended to a newsletter. There is no newsletter tool on this frontend.

What if I paste a client's database into the JSON tool?

The tool formats text in the page. It does not upload it. You still should not paste secrets into a browser you do not control, and you should not paste personal data you do not have permission to handle. The tool is for syntax, not for customer lists.

Does the Mumbai cache store personal data?

The marketing pages describe a cache for hosted sites, and they say logins, carts and uploads skip that cache. This privacy notice is about the storefront itself. The storefront pages you are reading are static. A cache in front of them would store page files, not your order form, because the order never leaves the browser.

How do I ask for a copy of my data?

Open the browser's site data for datadoodles.site, or read the account page while logged in. That is the copy. Email contact@datadoodles.site or use the contact form. Do not expect a PDF from this page.

Are location pages tracking me?

No. A page about hosting for Kochi or Dubai does not read your GPS and does not switch the price. Every price remains in INR. The page is a description of the same three plans.

What about the coupon field?

DOODLE10 is checked in the page. The code is not sent to a promotions vendor. If the code is wrong, the form says it is not recognised. The field is not a profile of your shopping habits.

Who is the contact for privacy questions?

Use the contact form and choose a topic. Say that the message is about privacy. The form's local receipt is the acknowledgement this page can give. For a reply, email contact@datadoodles.site.