← Home

Privacy Policy

Last updated: 3 November 2026

This policy explains what personal data msenthil.com (“the site”, “we”, “us”) collects, how it is used, stored and protected, whether it is shared, and how to reach us. The site is the personal website of Senthilkumar Murugesan, together with a private admin console at /admin that only the site owner can sign in to.

1. Data we collect

a) Information you give us

  • Speaker invitation form: your name, email address, organization, event name, and optionally the event date, city, format, audience size, topic and your message.
  • Mentorship request form: your name, email address and message, and optionally your role, organization, area of interest, preferred mode and a profile link.

b) Information collected automatically

  • Anonymous usage counters: daily totals such as page views, video plays, downloads and likes. These counts are not linked to you.
  • Google Analytics for Firebase: standard analytics data such as pages visited, device and browser type, approximate location (derived from your IP address) and the events listed above.
  • reCAPTCHA Enterprise (Firebase App Check): device and interaction signals that Google uses to tell real visitors from bots.
  • Browser storage: your light or dark theme choice, and short-lived flags that keep repeat views or form submissions from being counted twice. These stay in your browser.

c) Google sign-in and connected accounts (admin console only)

Only the site owner signs in to the admin console. Visitors never have to sign in. When the owner signs in with Google or connects an account, we receive:

  • Basic profile: name, email address and profile picture (scopes openid, email, profile). This is used to confirm the person signing in is an authorized administrator and to show which account is connected.
  • Google Calendar (calendar.events): upcoming events, read so speaking engagements can be listed and planned, and new events added when the owner creates a talk.
  • Google Photos Picker (photospicker.mediaitems.readonly): only the photos the owner picks are copied, for use in the site’s gallery and photo studio. The rest of the library is never accessed.
  • Other optional connections: Microsoft Outlook and Zoho (calendar), plus LinkedIn, Facebook, Instagram and X (profile, and posting on the owner’s behalf). For each one we receive the basic profile and the permissions shown on that provider’s consent screen.

2. How we use data

  • To read and reply to speaker and mentorship requests.
  • To understand which content is useful and to improve the site.
  • To protect the site and its forms from spam, abuse and automated traffic.
  • To run the admin console: managing talks, the calendar, the photo gallery and social posts for the site owner.

We do not sell personal data. We do not use it for advertising, and we do not use it to build profiles of visitors.

3. Google user data and Limited Use

msenthil.com’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • Google user data is used only to provide the admin console features described above.
  • It is not transferred to anyone except as needed to provide those features, to comply with law, or as part of a merger or acquisition.
  • It is not used for advertising, and it is not sold.
  • No human reads it unless the owner asks, it is needed for security, or the law requires it.
  • It is not used to train generalized AI or machine-learning models.

4. How data is stored and protected

  • Where: data is stored on Google Cloud through Firebase (Cloud Firestore, Cloud Storage and Cloud Functions in the asia-south1, Mumbai, region).
  • Access control: database and storage security rules deny all access by default. Only the verified administrator account can read form submissions, analytics totals or private photos.
  • Secrets: OAuth access and refresh tokens, client secrets and API keys are kept server-side in a store that no browser can read. They are used only by our server functions.
  • Transport and app security: all traffic uses HTTPS (with HSTS). The site also sends a strict Content Security Policy, and every server request must carry an App Check token.
  • Encryption at rest: Google Cloud encrypts all stored data by default.

5. Retention and deletion

  • Form submissions are kept as long as they are needed to respond to and follow up on your request. Ask us and we will delete yours.
  • Analytics data is kept according to Google Analytics retention settings. The anonymous daily counters contain no personal data.
  • When a connected account is disconnected in the admin console, its tokens are deleted from our servers (Google tokens are also revoked with Google). You can also revoke access at any time from your Google Account permissions page.

6. Sharing with third parties

We do not sell, rent or trade personal data. Data is shared only with these service providers, and only so they can run the site:

  • Google (Firebase, Google Cloud, Google Analytics, reCAPTCHA): hosting, storage, analytics and bot protection. See the Google Privacy Policy.
  • YouTube: talk videos are embedded in privacy-enhanced (youtube-nocookie.com) mode and load only when you press play.
  • Connected platforms (Microsoft, Zoho, LinkedIn, Facebook, Instagram, X): data goes to them only when the site owner acts in the admin console, for example adding a calendar event or publishing a post.
  • AI model providers: the admin console can send text the owner writes, such as blog drafts, to an AI provider the owner chooses. Visitor form submissions and Google user data are not sent to AI providers.

We may also disclose information if the law requires it, or if that is needed to protect the rights and safety of the site, its users or others.

7. Your choices and rights

  • You can ask to access, correct or delete the personal data we hold about you.
  • You can block or clear cookies and browser storage, or use an analytics opt-out add-on in your browser.
  • Depending on where you live (for example under India’s DPDP Act or the EU/UK GDPR), you may have further rights, such as objecting to processing or filing a complaint with your data protection authority.

8. Children

The site is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows when it last changed. For significant changes, we will post a notice on the site.

10. Contact

For privacy questions, data requests or support, contact:

Senthilkumar Murugesan
Madurai, Tamil Nadu, India
Email: sentenwin@gmail.com

We aim to reply within 30 days.