Privacy Policy
Last updated: June 12, 2026
This Privacy Policy explains how CoderFriend (operated by Soumik Sengupta) collects, uses, and protects your personal data when you visit coderfriend.com. We comply with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Who We Are
Data Controller: Soumik Sengupta, trading as CoderFriend
Website: https://www.coderfriend.com
Contact: [email protected]
For any privacy-related questions or requests, please email us at the address above. We will respond within 30 days.
2. Data We Collect
a) Contact form
When you submit the contact form, we collect your name, email address, subject line, and message. This data is transmitted via SMTP2GO to our inbox and is used solely to respond to your enquiry.
b) Google Analytics (only with your consent)
If you accept analytics cookies, Google Analytics 4 collects anonymised usage data including pages visited, time on site, browser type, device type, and approximate location (country/city level). We do not enable Google Signals or cross-site tracking. Your IP address is anonymised before storage.
c) Cloudflare
This site is served through Cloudflare's CDN. Cloudflare processes IP addresses for security and performance purposes under their own privacy policy. The Cloudflare Turnstile widget (used to protect the contact form) performs bot-detection checks without setting tracking cookies.
d) No other data
We do not collect payment information, create user accounts, use social login, or install third-party advertising trackers.
3. Legal Basis for Processing (GDPR)
- Contact form data — processed on the basis of legitimate interests (Art. 6(1)(f) GDPR): responding to your enquiry.
- Google Analytics — processed only on the basis of your explicit consent (Art. 6(1)(a) GDPR), which you may withdraw at any time by clearing your browser cookies or using the preference centre in our cookie banner.
- Cloudflare processing — processed on the basis of legitimate interests: security, DDoS protection, and site delivery.
4. How We Use Your Data
- To reply to contact form enquiries
- To understand how visitors use this site (analytics, if consented)
- To protect this site from spam and abuse (Turnstile)
We will never sell, rent, or share your personal data with third parties for marketing purposes.
5. Third-Party Processors
We share data only with the following sub-processors:
| Processor | Purpose | Location |
|---|---|---|
| SMTP2GO | Email delivery for contact form | Australia / Global |
| Cloudflare | CDN, DDoS protection, Turnstile | USA / Global |
| Google Analytics 4 | Site analytics (consent required) | USA / Global |
All third-party processors are bound by data processing agreements and comply with GDPR where applicable.
6. Cookies
We use the following cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| cookie_consent | Stores your cookie preference | 1 year (localStorage) |
| _ga, _ga_* | Google Analytics (consent required) | 2 years |
| Cloudflare cookies | Security / DDoS protection | Session / 1 year |
You can withdraw analytics consent at any time by clicking “Cookie Preferences” in the site footer.
7. Data Retention
- Contact form submissions are retained in our email inbox for up to 12 months, then deleted.
- Google Analytics data is retained for 14 months (Google's minimum configurable period).
- Cloudflare logs are retained per Cloudflare's standard data retention policy.
8. Your Rights (GDPR — EEA/UK Residents)
If you are located in the European Economic Area or United Kingdom, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data (“right to be forgotten”)
- Restriction — request that we limit processing of your data
- Portability — request your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — withdraw analytics consent at any time via the cookie banner
To exercise any right, email [email protected]. You also have the right to lodge a complaint with your local supervisory authority.
9. Your Rights (CCPA — California Residents)
If you are a California resident, you have the right to:
- Know — request disclosure of the categories and specific pieces of personal information we have collected
- Delete — request deletion of your personal information
- Opt-out of sale — we do not sell personal information
- Non-discrimination — we will not discriminate against you for exercising your privacy rights
To submit a CCPA request, email [email protected] with “CCPA Request” in the subject line.
10. International Data Transfers
Some of our processors (Cloudflare, Google, SMTP2GO) transfer and process data in the United States and other countries. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards as required by GDPR.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects when changes were last made. We encourage you to review this page periodically.
12. Contact
Questions or concerns about this Privacy Policy? [email protected]