Privacy Policy

This is how Singh.in handles your data. Short version: we collect what we need to run the service, we don't sell anything, and you can delete your data any time.

What we collect

When you sign up: the @singh.in address you claim, your destination email, optional country and city, your IP address and browser.

When you build your profile (all optional): display name, tagline, bio, pronunciation, profile and background images, social handles, and website URLs.

As you use the service: login times and IP addresses, profile view counts, messages sent via contact forms (relayed, not stored long-term), and records of significant account changes for security auditing.

What we do not collect: we do not read or store forwarded email content, we do not track you across other sites, we do not use advertising trackers, and we do not require "real name" verification.

Why we collect it

To run the service (forwarding mail, displaying your profile, letting you log in), to prevent abuse, to send occasional service emails, and to maintain security audit logs.

What we share

Your profile page is public by default — that's how the service works. You can switch to private with one click in settings.

We also share data with our hosting provider (stores data on our behalf), our DNS/CDN (sees IP addresses for security), and our email service (delivers system emails on our behalf).

We do not sell your data. We do not share it for advertising purposes. We do not give it to anyone except in response to a valid legal demand.

Forwarded email

Mail sent to you@singh.in is passed on to your destination email by our mail server. The mail is not stored in our system. We have no copy.

Cookies

We use one session cookie to keep you logged in. We use our CDN's standard security cookies to detect bot traffic. That's it.

Your rights

You can view, edit, or delete your data from your dashboard. Deleting your account permanently removes your profile and releases your @singh.in address back to the pool. We honor GDPR, CCPA, and DPDP Act rights.

Data retention

Active accounts: kept as long as you keep them.
Deleted accounts: removed within 30 days, audit logs retained 12 months.
Released addresses: account record deleted; address returns to public pool.
Server logs: rotated every 30 days.

Children

Singh.in is not for children under 13. We don't knowingly collect data from anyone under 13.

Contact

Privacy questions or requests: contact@singh.in.