What this notice covers
This notice covers royalpandin.com, the editorial guide. It does not cover the RoyalPand lobby or the KYC, cashier and support flows on the platform itself — those are covered by the RoyalPand privacy notice, which is linked from the lobby footer.
Data we collect
The editorial site is a static publication. It does not collect personal data beyond what the browser sends to every web server: the IP address, the user agent string, the referrer and the requested URL. These are recorded in the server log for the standard retention period required by the hosting provider; the log is not used for tracking or analytics.
Cookies
The editorial site uses no analytics cookies and no advertising cookies. The site uses no third-party trackers. The session cookies are limited to those required for the site to function (none, currently — the editorial site is purely static). The age-acknowledgement banner on the editorial site stores a single flag in localStorage; the flag is not transmitted to any server.
Affiliate links
The site contains affiliate links to the RoyalPand lobby. The links route through a first-party address; the destination is the RoyalPand lobby, which has its own cookie and data practices. Clicking an affiliate link takes you to a different site with its own privacy notice; we recommend reading that notice.
Editorial enquiries
If you write to [email protected], [email protected] or [email protected], your message and your email address are stored in the editorial inbox for the period required to respond and to file the correspondence. The inbox is not used for marketing; the addresses are not added to any newsletter list.
Your rights
You have the right to request a copy of the personal data we hold about you (in practice, only your editorial-enquiry correspondence), the right to correct inaccuracies, the right to request deletion and the right to lodge a complaint with the relevant data-protection authority. To exercise any of these rights, write to [email protected].
Retention
Server logs are retained for the period required by the hosting provider (typically thirty days), then deleted. Editorial-enquiry correspondence is retained for two years, then deleted. The age-acknowledgement flag is retained in localStorage until the user clears their browser data.
Updates to this notice
This notice is reviewed annually and ad-hoc when the data practices change. The current version is dated 03 August 2026. Material changes are announced in the news register.
Children's privacy
The editorial site is not directed at children under 18. The site does not knowingly collect personal data from children. If the editorial desk becomes aware that it has collected personal data from a child, the desk deletes the data within thirty days. Parents or guardians who believe the desk has collected data from their child can write to [email protected] to request deletion.
The RoyalPand platform is a separate service with its own age restrictions. The platform requires KYC verification including age verification; users under 18 cannot pass KYC. The editorial site's content about the platform is intended for adult readers; the desk does not direct content at children.
Changes to the data we collect
The editorial site is committed to collecting only the data necessary to operate the publication. If the desk adds a new data collection — for example, an analytics tool or a newsletter subscription — this notice will be updated to reflect the change. The updated notice will be published before any new data collection begins.
Material changes to data collection are announced in the news register. Readers who want to be notified of material changes can subscribe to the editorial site's RSS feed. The feed URL is published in the llms.txt file.
How to lodge a complaint
Readers who believe the editorial site has mishandled their personal data can lodge a complaint with the editorial desk at [email protected]. The desk responds within seven working days. If the complaint is not resolved to the reader's satisfaction, the reader can escalate to the relevant data-protection authority.
The relevant data-protection authority in India is the Data Protection Board of India, established under the Digital Personal Data Protection Act, 2023. Readers who wish to escalate can find the Board's contact details on the official government website. The editorial desk will cooperate with any investigation by the Board.
Data minimisation
The editorial site is committed to data minimisation — collecting only the data necessary to operate the publication. The site does not collect analytics data; it does not track readers across sessions; it does not build reader profiles for advertising or marketing purposes. The site's data collection is limited to what the browser sends to every web server: the IP address, the user agent string, the referrer and the requested URL.
Data minimisation is a deliberate choice. The desk could collect more data — for example, an analytics tool or a newsletter subscription — but the desk judges that the additional data is not necessary for the publication to fulfil its editorial mission. Readers who want more information about the desk's data practices can write to [email protected].
Lawful basis for processing
The editorial site processes personal data on the lawful basis of legitimate interest — the desk has a legitimate interest in operating the publication, and processing the data described in this notice is necessary for that legitimate interest. The desk has balanced the legitimate interest against the reader's rights and freedoms and concluded that the processing is proportionate and necessary.
Readers who object to the processing on the basis of legitimate interest can write to [email protected]. The desk will respond within seven working days. Where the objection is valid, the desk will cease the processing or take steps to address the reader's concerns.
Automated decision-making
The editorial site does not use automated decision-making. No editorial content is generated by an algorithm; no editorial decision is made by an algorithm; no reader is profiled by an algorithm. The site is operated by a small team of editors and writers who review every page before publication.
Automated tools are used for routine checks — for example, the verification of the SHA-256 fingerprint of the APK or the testing of the responsive layout at mobile widths. The results of these checks are reviewed by a human before any decision is made. The desk does not delegate editorial decisions to an algorithm.
Data retention in detail
The editorial site retains different categories of data for different periods. Server logs are retained for thirty days, then deleted. Editorial-enquiry correspondence is retained for two years, then deleted. Corrections records are retained for the lifetime of the publication. The age-acknowledgement flag is retained in localStorage until the user clears their browser data.
The retention periods are set by Indian law and by the editorial desk's internal policies. The desk does not retain data beyond the periods described above except where retention is required by law — for example, a court order or a regulatory investigation. Readers who want to know more about a specific retention period can write to [email protected].
Data portability
Readers have the right to receive a copy of the personal data the editorial desk holds about them. The right is granted under the Digital Personal Data Protection Act, 2023. To exercise the right, write to [email protected]. The desk responds within thirty days. The data is provided in a portable format — typically a JSON file — that can be transferred to another service.
The right to data portability does not extend to data the desk does not hold. For example, the desk does not hold the user's RoyalPand account data, KYC documents or wallet history; those data are held by the operator. Readers who want a copy of their RoyalPand account data must request it through the RoyalPand lobby's privacy notice.
How this notice is updated
This notice is reviewed annually and ad-hoc when the data practices change. The current version is dated 03 August 2026. Material changes are announced in the news register; minor changes are appended to the notice with a dated note. The full version history is available in the corrections log.
Readers who want to be notified of changes to this notice can subscribe to the editorial site's RSS feed. The feed URL is published in the llms.txt file. The desk does not send email notifications of changes; the feed is the authoritative source.