Our Commitment to Your Privacy
This website (nanasunkersett.com) serves as a digital memorial to honour Jagannath "Nana" Shankarshet and hosts a public petition to rename Mumbai Central Railway Station.
We take personal data protection seriously. In accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, this notice informs you of the personal data we collect, why we collect it, how it is processed, and your rights regarding your information.
1. What Personal Data We Collect
We only collect data that you voluntarily provide to us when interacting with the site's interactive features:
- Public Petition Campaign: Full name, email address, city, and optionally your PIN code and a brief support message. We also generate secure cryptographically-hashed (HMAC-SHA256) identifiers from your IP address and browser User Agent to prevent automated spam and duplicate entries. We do NOT store your raw IP address or User Agent in the petition database.
- Digital Memorial Tributes (Respects): Optionally your city, optionally a note of remembrance (displayed on the Remembrance Wall). We store the raw IP address temporarily in rate-limiting logs to prevent database abuse, which are purged periodically.
2. Purpose of Collection & Processing
Your data is processed strictly for the following purposes:
- Validation: To ensure all signatures on the petition are genuine and unique, preventing fraudulent representations. We accept signatures directly in good faith without an email verification loop, but utilize secure cryptographic hashing of browser metadata to prevent automated spam and duplicates.
- Consented Display: If you check the explicit consent box, your name and city are displayed on the public list of petition supporters, or your tribute note is displayed on the Remembrance Wall. Your email address is never displayed publicly.
- Communication: If you explicitly consent to receive updates, we may contact you regarding campaign progress.
3. Data Security and Storage
All collected personal data is stored securely in Cloudflare D1 databases located in regions matching secure data residency standards. We implement structural encryption and cryptographic hashing to protect your email address and IP metadata from breach.
4. Sharing and Disclosure
We do not sell, rent, or trade your personal data. The petition signatures (excluding email addresses, hashed metadata, and consent logs) will be presented collectively to the relevant government authorities (such as the Ministry of Railways or local civic bodies) as part of the formal campaign submission.
5. Your Rights (Access, Correction & Erasure)
Under the DPDP Act 2023, you hold the right to access, verify, correct, or request the erasure of your personal data at any time.
If you wish to remove your signature from the petition or withdraw your tribute note, please email us at [email protected] with the name and email address used for submission. We will process your request and permanently erase the corresponding database records within 72 hours of verification.
6. Updates to this Notice
We may update this Privacy Policy from time to time. The latest version will always be published on this page with the effective date.
Effective Date: August 24, 2026