Privacy
How this site handles your data
This is a personal homepage. It does not collect anything about you, nor does it build a profile of anyone who reads it.
Who is responsible
I, Rajarshi Haldar, run this site as an individual, not on behalf of any employer or institution. Where applicable, I process personal data in accordance with the GDPR and the UK GDPR. I am the controller for personal data that I keep.
The Email me button on the homepage is the quickest way to reach me. If you do not have a mail client, ask through any other route you already have (a paper's corresponding address or a department directory).
What is collected
Nothing is collected. There is no script that measures your visit, and no report about it is sent anywhere.
There is no advertising, no data broker, and no third-party tag. Nothing here follows you to another site.
What is stored on your device
Nothing is stored on your device. There are no cookies set, and nothing is written to local storage.
The default color theme will be determined by your system setting on every visit. Since I do not store your preference for this website, switching it with the toggle lasts only until you reload, after which it reverts to the default theme.
What gets loaded on the pages of this website
Every file comes from this domain. The typefaces are served from here rather than from a font network, so reading a page does not contact any other company.
Who else is involved
Cloudflare, Inc. hosts the site. Every request reaches its servers before it reaches these pages, so the request data any host keeps (an IP address, a time, the page asked for, the browser that asked) is created there. I have never seen it and I do not hold any copy; none of it is ever shown to me.
Cloudflare provides hosting, delivery, and security services. Depending on the service and data involved, Cloudflare may process request data as a processor for me or as an independent controller. I do not access visitor request logs. Cloudflare describes its roles and retention practices in its privacy policy (opens in a new tab). The applicable service and data-processing terms identify the relevant role and retention period.
Cloudflare and Google may process personal data outside the EEA or the United Kingdom. Where a restricted transfer occurs, I rely on an applicable adequacy decision, including the EU–US Data Privacy Framework or UK Extension, only when the recipient has active coverage.
Email basis
The only data I keep is correspondence I receive, and the basis for keeping it is legitimate interests under Article 6(1)(f), specifically the interest in answering professional and academic correspondence.
There is no automated collection and no fixed retention schedule. I keep correspondence as long as it serves the purpose of the exchange, such as answering a question, managing a matter, or keeping a record of what was discussed. On request, I erase specific correspondence where the GDPR conditions for erasure apply, except where retention is necessary to comply with a legal obligation or to establish, exercise, or defend legal claims.
The Email me button opens a message addressed to a Gmail account. If you send the message, Google receives it as the mailbox provider, and its own privacy policy (opens in a new tab) governs what it does in that capacity.
What I hold is your address together with the contents of the message you send.
Your rights
You may request access to, correction of, erasure of, or restriction of processing of your personal data where the GDPR conditions apply. You may object at any time to processing based on legitimate interests. Data portability applies only where the conditions in Article 20 are met. Those conditions normally do not apply to correspondence processed under legitimate interests. These rights have legal exceptions.
Ask through the Email me button or by any other route you have for reaching me.
You may also complain to your national supervisory authority. In the United Kingdom, that is the Information Commissioner's Office (opens in a new tab). In other countries, it is the authority designated by that country's data-protection law.
Automated decisions
None. Nothing here makes a decision about you by automated means or builds a profile about you.
Changes
Any revision updates the date on this page.
Last updated September 7, 2026
Back to the homepage