Privacy Policy

Information we collect

We collect only the minimum information required to keep the site running and to understand which articles devotees find useful. Specifically:

• Standard server logs. Our web host records your IP address, browser user-agent, the page you requested, the referring URL, and the timestamp. These logs are essential for security and abuse prevention and are retained for ninety days before automatic deletion.
• Analytics events. We use Google Analytics 4 in a privacy-friendly configuration with IP anonymisation enabled. GA4 logs anonymised page views, session duration, country, and broad device category.
• Security events. The Wordfence security plugin records failed login attempts to the WordPress admin area (which is closed to the public) so that brute-force attacks can be blocked. These logs include IP addresses and are retained for thirty days.
• Voluntary correspondence. When you email leomultimediaofficial@gmail.com, the email, your email address, and any attachments you send are stored in our Gmail inbox until we archive the thread.

We do not collect names, addresses, phone numbers, payment details, or any other personally identifying information through forms, accounts, or trackers on this site. We do not buy, sell, or rent data of any kind.

Cookies and similar technologies

A small number of cookies are set when you load our pages. Each falls into one of three categories:

• Strictly necessary. The LiteSpeed cache plugin used by our host sets short-lived cookies to serve faster page versions. These cookies hold no personal data and expire when you close the browser.
• Performance. Google Analytics sets _ga and _ga_* cookies that expire in roughly thirteen months. They generate an anonymous client identifier so that repeat visits are not double-counted.
• Functional. If we ever embed YouTube or Google Maps in an article, the embed itself may set a cookie. We use the youtube-nocookie.com variant where possible so that no cookie is set until you click play.

You can clear or block any of these through your browser settings without breaking the site. We do not run advertising cookies today; if that changes, this policy will be updated and a consent banner displayed.

Third-party services we use

The following third parties may receive data when you load our pages:

• Hostinger — our web host. Standard server logs as described above.
• Cloudflare — content delivery network. Cloudflare logs request metadata for caching and DDoS protection; see cloudflare.com/privacypolicy for their notice.
• Google Analytics 4 and Google Search Console — anonymised usage measurement and search-traffic diagnostics. Google’s processing is governed by policies.google.com/privacy.
• Google Fonts — typeface delivery. Your browser fetches font files from fonts.gstatic.com; Google may briefly log the request.

We do not embed Facebook Pixel, X (Twitter) trackers, TikTok pixels, or any advertising network beyond what is listed here.

How long we keep data

• Server logs: 90 days, then automatically purged.
• Wordfence security events: 30 days.
• Google Analytics: 14 months (the lowest GA4 retention setting).
• Email correspondence: archived indefinitely unless you ask us to delete it.

Your rights

Although we hold very little personal data, the rights set out in the EU General Data Protection Regulation (GDPR) and India’s Digital Personal Data Protection Act 2023 (DPDP Act) apply where relevant. You may:

• Ask what information we hold about you.
• Request correction of inaccurate data.
• Request deletion (“right to be forgotten”) of email correspondence or any other voluntarily submitted material.
• Withdraw consent for analytics by installing a browser opt-out extension or by clearing cookies.
• Lodge a complaint with your local supervisory authority, such as the Data Protection Board of India.

To exercise any of these rights, please email leomultimediaofficial@gmail.com from the address you originally used to contact us. We respond within thirty days.

Children

Our content is general pilgrim information and is not directed at children under the age of 13 (under GDPR) or 18 (under the DPDP Act). We do not knowingly collect data from minors. If a parent or guardian believes a child has emailed us, please write in and we will delete the correspondence on request.

Security

We use HTTPS site-wide, Wordfence intrusion prevention, weekly off-site backups, and two-factor authentication on the admin area. No system is fully impenetrable, but we treat security seriously and disclose any confirmed breach to affected users within seventy-two hours, as required by the DPDP Act.

Changes to this policy

We may update this notice from time to time. The “Last updated” date at the top will always reflect the latest revision. Substantial changes (for example, adding a new analytics provider) will be flagged in a notice on the homepage for at least fourteen days.