Legal

Privacy Policy

Last updated: June 12, 2026

This Privacy Policy explains how CoderFriend (operated by Soumik Sengupta) collects, uses, and protects your personal data when you visit coderfriend.com. We comply with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Who We Are

Data Controller: Soumik Sengupta, trading as CoderFriend
Website: https://www.coderfriend.com
Contact: [email protected]

For any privacy-related questions or requests, please email us at the address above. We will respond within 30 days.

2. Data We Collect

a) Contact form

When you submit the contact form, we collect your name, email address, subject line, and message. This data is transmitted via SMTP2GO to our inbox and is used solely to respond to your enquiry.

b) Google Analytics (only with your consent)

If you accept analytics cookies, Google Analytics 4 collects anonymised usage data including pages visited, time on site, browser type, device type, and approximate location (country/city level). We do not enable Google Signals or cross-site tracking. Your IP address is anonymised before storage.

c) Cloudflare

This site is served through Cloudflare's CDN. Cloudflare processes IP addresses for security and performance purposes under their own privacy policy. The Cloudflare Turnstile widget (used to protect the contact form) performs bot-detection checks without setting tracking cookies.

d) No other data

We do not collect payment information, create user accounts, use social login, or install third-party advertising trackers.

3. Legal Basis for Processing (GDPR)

  • Contact form data — processed on the basis of legitimate interests (Art. 6(1)(f) GDPR): responding to your enquiry.
  • Google Analytics — processed only on the basis of your explicit consent (Art. 6(1)(a) GDPR), which you may withdraw at any time by clearing your browser cookies or using the preference centre in our cookie banner.
  • Cloudflare processing — processed on the basis of legitimate interests: security, DDoS protection, and site delivery.

4. How We Use Your Data

  • To reply to contact form enquiries
  • To understand how visitors use this site (analytics, if consented)
  • To protect this site from spam and abuse (Turnstile)

We will never sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-Party Processors

We share data only with the following sub-processors:

ProcessorPurposeLocation
SMTP2GOEmail delivery for contact formAustralia / Global
CloudflareCDN, DDoS protection, TurnstileUSA / Global
Google Analytics 4Site analytics (consent required)USA / Global

All third-party processors are bound by data processing agreements and comply with GDPR where applicable.

6. Cookies

We use the following cookies:

CookiePurposeDuration
cookie_consentStores your cookie preference1 year (localStorage)
_ga, _ga_*Google Analytics (consent required)2 years
Cloudflare cookiesSecurity / DDoS protectionSession / 1 year

You can withdraw analytics consent at any time by clicking “Cookie Preferences” in the site footer.

7. Data Retention

  • Contact form submissions are retained in our email inbox for up to 12 months, then deleted.
  • Google Analytics data is retained for 14 months (Google's minimum configurable period).
  • Cloudflare logs are retained per Cloudflare's standard data retention policy.

8. Your Rights (GDPR — EEA/UK Residents)

If you are located in the European Economic Area or United Kingdom, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate data
  • Erasure — request deletion of your data (“right to be forgotten”)
  • Restriction — request that we limit processing of your data
  • Portability — request your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — withdraw analytics consent at any time via the cookie banner

To exercise any right, email [email protected]. You also have the right to lodge a complaint with your local supervisory authority.

9. Your Rights (CCPA — California Residents)

If you are a California resident, you have the right to:

  • Know — request disclosure of the categories and specific pieces of personal information we have collected
  • Delete — request deletion of your personal information
  • Opt-out of sale — we do not sell personal information
  • Non-discrimination — we will not discriminate against you for exercising your privacy rights

To submit a CCPA request, email [email protected] with “CCPA Request” in the subject line.

10. International Data Transfers

Some of our processors (Cloudflare, Google, SMTP2GO) transfer and process data in the United States and other countries. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards as required by GDPR.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects when changes were last made. We encourage you to review this page periodically.

12. Contact

Questions or concerns about this Privacy Policy? [email protected]