Privacy Policy

1. Who we are

DiffSight is owned and operated by Madhusudan, an individual based in Bangalore, Karnataka, India.

The operator is the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). For visitors covered by the EU or UK General Data Protection Regulation (“GDPR”), the operator is also the “data controller” for the personal data described in this policy.

Email: [email protected]
Postal address: Nagarabhavi - 560072, India

2. Summary

• Your compared content never leaves your device. Text and files you compare on DiffSight are processed entirely inside your web browser. They are not uploaded to our servers, and we cannot see, store, share or recover them.
• No accounts. DiffSight is free to use and has no sign-up, login or payments.
• Limited technical data. We use Google Analytics and Google Tag Manager (only if you allow Analytics or Marketing cookies), Google AdSense, Cloudflare and Google reCAPTCHA, and Amazon SES to send emails from our contact form. These services process limited data such as IP address, device information, cookie identifiers and, for email, the addresses and message involved.
• Your consent comes first. Analytics and advertising cookies are set only after you agree to them, and you can change your choice at any time using “Cookie settings” (the footer link or the cookie icon on every page).
• We do not sell your personal data for money.

3. Content you compare

DiffSight’s comparison tools run locally in your browser using JavaScript.

• When you paste text or open a file, your browser reads it on your device, and the differences are calculated on your device.
• The comparison tool sends none of this content to us or to any third party.
• When you close or refresh the page, the content is cleared, unless your own browser keeps a copy (for example, through form auto-restore or extensions you have installed).
• We do not use your compared content for analytics, advertising or training artificial-intelligence models.
• Because we never receive this content, we cannot retrieve it for you if it is lost.

If you compare confidential material, use a trusted and up-to-date device, and close the page when you are finished.

4. Information we collect

4.1 Collected automatically

• Technical data: IP address, browser type and version, operating system, device type, screen size, language settings, referring web address, and the date and time of your visit.
• Usage data (only with your consent where required by law): pages viewed, features used, time spent, approximate location (country or city, derived from your IP address), device and browser details, how you arrived at the Website, and session information. This is collected through Google Analytics (through Google Tag Manager), and only if you allow Analytics cookies.
• Advertising data (personalised advertising only with your consent where required by law): cookie and device identifiers, ads shown, and ad clicks. This is collected through Google AdSense.
• Security data: signals used to detect bots, abuse and attacks. This is processed by Cloudflare and Google reCAPTCHA.

4.2 Information you give us

If you use our contact form, we collect your name, email address, the topic you choose, the content of your message and anything else you choose to include. If you email us, we collect your email address and what you write.

When you submit the contact form, we also save your IP address and browser details (your browser’s “user agent”) with the message. We use them only to prevent spam and abuse and to investigate misuse of the form. We also use your IP address to limit how many messages can be sent from one connection.

We send you an automatic confirmation email, and we receive a copy of your message by email so we can reply.

If you rate DiffSight using the feedback card, we collect your star rating (1 to 5), the optional comment you write, and the page you were on, for example “/compare/json”. We do not save your name, email address or IP address with it, so please do not put personal details in the comment. We use your IP address only briefly, to limit repeat submissions, and do not store it with the feedback.

4.3 What we do not collect

We do not collect:

• account credentials or passwords;
• payment or card details;
• the content you compare.

We do not intentionally collect sensitive personal data, such as financial, health, biometric or government ID information. Please do not send it to us through the contact form.

5. How we use personal data and our legal grounds

We do not use personal data for automated decision-making that has legal or similarly significant effects on you.

6. Third-party services we use

Google Analytics and Google Tag Manager

Google Tag Manager, provided by Google LLC and Google Ireland Limited, is a tool that loads our measurement tags. Google Analytics 4, provided by the same companies, helps us understand how visitors use the Website. It uses cookies and similar technologies to collect usage and device data.

They run only with your consent. Until you allow the Analytics or Marketing category in our cookie settings, we do not load Google Tag Manager and no data is sent to Google for this purpose. We tell Google Tag Manager which categories you have allowed (using Google Consent Mode), and our tags are set up to run only for the categories you allowed. If you later switch a category off, we pass that choice on at once and delete that category’s cookies from your browser.

Google Tag Manager itself does not set cookies to track you. When Analytics is allowed, Google Analytics records each page you view (the page address without any search terms or fragment, and the page title) together with the technical and usage data described above. We have switched off Google Signals and advertising features in Google Analytics, so this data is not used to personalise ads. We do not send your compared text, your name or your email address to Google.

Google states that Google Analytics 4 uses IP addresses to estimate location but does not log or store them. We keep Analytics data for 14 months, then it is deleted automatically.

You can opt out of Google Analytics with Google’s browser add-on: https://tools.google.com/dlpage/gaoptout

Google AdSense

We display advertisements through Google AdSense.

Advertising cookies: Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this Website and to other websites. Google’s advertising cookies let Google and its partners serve ads to you based on those visits.

Opting out of personalised ads: You can turn off ad personalisation in Google’s My Ad Center (https://myadcenter.google.com).

Other vendors: You can opt out of personalised advertising from participating third-party vendors at https://www.aboutads.info/choices or, in Europe, at https://www.youronlinechoices.eu.

Non-personalised ads: If you decline personalised ads, Google may still show non-personalised ads. These may use cookies for frequency capping, aggregated reporting and fraud prevention.

To learn how Google uses information from sites like ours, see https://policies.google.com/technologies/partner-sites

Cloudflare

Cloudflare, Inc. provides content delivery, performance and security services for the Website. It processes IP addresses and request data to deliver pages and to block malicious traffic. It may set strictly necessary security cookies, which are listed in our Cookie Policy.

Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/

Google reCAPTCHA

We use Google reCAPTCHA on our contact form to check that submissions come from a person and not an automated program. reCAPTCHA collects hardware and software information, such as device and application data and how you interact with the page, and sends it to Google for analysis. Your use of reCAPTCHA is subject to Google’s Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms).

Contact form and email

Messages sent through the contact form are saved in our own database. We send you a confirmation email and send ourselves a notification containing your message. These emails are sent through Amazon Simple Email Service (Amazon SES), provided by Amazon Web Services, which processes your name, email address and message on our behalf.

Emails you send us directly are received and stored by our mailbox provider, Microsoft Outlook.

7. How we share personal data

We share personal data only:

• with the service providers listed in Section 6, to the extent they need it to provide their services;
• with courts, police, regulators or other authorities when required by law, or when needed to protect our rights, users or the public;
• with a successor owner, if the Website is sold or transferred, subject to this policy.

We do not sell personal data for money. Under some laws, such as certain US state privacy laws, using advertising cookies may count as “selling” or “sharing” personal data for targeted advertising. You can opt out at any time through Cookie Settings or the methods in Section 11.

8. International transfers

Our service providers, including Google, Cloudflare and Amazon Web Services, may process data in the United States and other countries outside where you live.

India: Transfers are made in line with the DPDP Act, including any restrictions the Central Government notifies.

EEA, UK and Switzerland: We rely on appropriate safeguards. These include the European Commission’s Standard Contractual Clauses and, where applicable, the providers’ certification under the EU-US Data Privacy Framework, its UK Extension and the Swiss-US Data Privacy Framework.

9. How long we keep data

We may keep aggregated or anonymised information that no longer identifies you without time limit.

10. Security

We protect the Website with:

• HTTPS encryption;
• Cloudflare’s security services;
• collecting as little data as possible;
• processing your compared content locally, on your device.

No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected people as required by the DPDP Act and its Rules. Where GDPR applies, we will notify the relevant supervisory authority and affected people as it requires.

11. Your rights and choices

11.1 Choices available to everyone

• Change or withdraw your cookie consent at any time using “Cookie settings” (the footer link or the cookie icon on any page). Withdrawing consent is as easy as giving it.
• Block or delete cookies in your browser settings.
• Turn off personalised Google ads at https://myadcenter.google.com.

11.2 Users in India

Under the DPDP Act, you have the right to:

• obtain a summary of your personal data and how it is processed;
• have your personal data corrected, completed, updated or erased;
• withdraw your consent;
• have your grievances addressed by our Grievance Officer (Section 13);
• nominate another person to exercise your rights if you die or become incapacitated.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

11.3 Users in the EEA, UK and Switzerland

You have the right to:

• access, rectify or erase your personal data;
• restrict or object to processing, including processing based on legitimate interests;
• data portability;
• withdraw consent at any time, without affecting processing that took place before you withdrew it;
• lodge a complaint with your local data protection supervisory authority.

11.4 Users in the United States

Depending on your state, you may have the right to:

• know what personal data we hold about you;
• delete or correct it;
• opt out of the “sale” or “sharing” of personal data for targeted advertising;
• not be discriminated against for exercising these rights.

Where required by law, we treat a Global Privacy Control (GPC) signal as a valid opt-out request. We do not otherwise respond to browser “Do Not Track” signals.

11.5 How to make a request

Email [email protected]. We may need to ask for information to confirm your identity. We will respond within 30 days, or sooner if the law requires.

We do not link analytics or advertising cookie data to your name or email address. This means we may be unable to identify that data as yours, but Google’s own tools above let you manage it directly.

12. Children

DiffSight is not directed at children. Under the DPDP Act, a child is anyone under 18.

• We do not knowingly collect personal data from children.
• We do not knowingly track children or serve them targeted advertising.
• If you are under 18, or under the age of majority where you live, please use the Website only with the involvement of a parent or legal guardian.
• If you believe a child has sent us personal data, contact us and we will delete it.

13. Grievance Officer (India)

In accordance with the Information Technology Act, 2000, the rules made under it, and the DPDP Act, our Grievance Officer is:

Name: Madhusudan
Email: [email protected]
Address: Nagarabhavi - 560072, India

We will acknowledge grievances within 15 to 30 days and aim to resolve them within 30 days of receipt.

14. Links to other websites

The Website may contain links and advertisements leading to third-party websites. Those websites have their own privacy practices, and we are not responsible for them.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date above. If the changes are significant, we will also show a notice on the Website.

16. Contact us

Madhusudan, DiffSight
Nagarabhavi - 560072, India
Email: [email protected]

Website: https://diffsight.com