Privacy Policy

1. Who is responsible for your data

Manapparai Info is run by Rehan Mobile Apps. Under the Digital Personal Data Protection Act, 2023 (DPDP Act), we are the Data Fiduciary for the personal data described in this policy.

For any question about your data, write to manapparai.com@gmail.com. This address reaches the person who answers data questions for us.

2. What we collect and why

When you read the site. We do not ask who you are. The company that hosts the site receives your IP address, browser details and the pages you open, because that is how web pages are delivered and protected (see Who we share it with).

Votes ("This is correct" / "Something is wrong"). We store the listing, your vote and the time. So that each device votes only once, we also store a one-way code (a SHA-256 hash) made from your IP address, your browser's user-agent and a secret value. We never store the IP address itself, and the code cannot be turned back into it.

Reports. When you report a listing, we store the reason you picked (fake, needs update, closed or other), any note you type, the time and the same one-way code.

Submissions (new place, correction, feedback, advertising enquiry). We store what you type into the form, the language of the page, the time and the same one-way code. An email address or phone number for follow-up is optional; if you give one, we use it only to ask about or reply to your submission.

Rate limits. To stop floods of requests, we count requests from each connection for a short time, using a separate one-way code made from your IP address and a secret value.

Emails. If you write to us, we receive your email address and whatever you include, and use them to reply.

Business details in listings. Listings show business names, addresses, phone numbers and sometimes a contact person's name, mostly details that the businesses themselves made public for their customers. If a listing shows your personal details and you want them changed or removed, see Your rights.

We do not ask for your name, an account, your location or your contacts, and we do not ask for sensitive information. Please do not put private details, such as ID numbers, into notes or submissions.

3. Why we may use it

We use this data only for the purpose you gave it for: counting votes, checking reports and submissions, replying to you, and protecting the site from abuse.

When you vote, report or send a form, you choose to give us this data for that purpose (DPDP Act, sections 6 and 7(a)). The report and submission forms show a short notice next to the send button, and this policy explains the rest.

You can withdraw your consent at any time by writing to us. We will then stop using, and delete, the data we can link to you, except anything the law requires us to keep. Withdrawing does not undo a change already made to a listing, but we can remove your contact details and your note.

We never sell your personal data, and we do not use it for advertising.

4. How long we keep it

These periods come from how the site's systems work today:

• Rate-limit counters (one-way code of your IP address): removed by a daily clean-up once they are more than 2 hours old, so they last about a day at most.
• Reports and submissions: kept until a reviewer decides on them, then deleted automatically 180 days after the decision.
• Change history: when a reviewer decides on a report or submission, the directory's change history records the decision and what was sent, but never your contact details or the one-way code. We keep it so we can explain and undo changes to listings.
• Votes and their one-way code: kept while the listing is on the site, so the counts stay correct. There is no automatic deletion of votes yet. You can change your vote at any time.
• Details we published from your submission become part of the listing and stay as long as the listing does.
• Emails: kept only as long as we need them to deal with your message and any follow-up.
• Backups: [To be completed by the site owner: how long database backups are kept, once backups are set up].
• Your browser's storage: stays on your device until you clear it; see the Cookie & storage notice.
• Visit totals (analytics): daily totals with no cookie, identifier or IP address; deleted automatically after 400 days.
• Google Analytics (only if you accept): Google deletes the detailed data after 2 months. Its cookies last up to 2 years in your browser unless you decline later or clear them; your choice on the banner is asked again after a year.

5. Who we share it with

We share personal data only with the service providers that run the site for us, and when the law requires it, for example a lawful order from a court or a government agency. Each provider has its own privacy policy:

• Cloudflare hosts the website, delivers the pages and blocks abusive and automated traffic. It processes IP addresses and request details to do this. Cloudflare privacy policy.
• Cloudflare also stores votes, reports, submissions and our daily visit totals in its database service (D1). To review new reports and submissions, the site owner's admin copies them into its own database; both copies are deleted 180 days after the decision.
• Cloudflare Turnstile runs the "verify you are human" check on forms and in the report dialog. It processes signals from your device and browser, such as your IP address, TLS fingerprint and user-agent, to tell people from bots. We do not send it your IP address ourselves. Turnstile Privacy Addendum.
• Google: Google Fonts (the text fonts, on every page), Google Maps (the map on place pages), YouTube (video pictures in News), Gmail (our email) and, once switched on, Google AdSense (see Advertising). Google Privacy Policy and how Google uses data from sites that use its services.
• Instagram (Meta): News links to Instagram posts. Instagram receives your data only when you open a post on Instagram. Instagram privacy policy.
• News publishers and Wikimedia: pictures next to headlines, and on our Wiki page, load from the publisher's or Wikimedia's servers, which see your IP address.

Some of these providers process data on servers outside India. The DPDP Act allows this, except to countries that the Government restricts under section 16.

Our own visit counts. When our community server is switched on, it counts visits as daily totals only: which pages are opened; what is typed into the search box and the Ask chat (for the chat, only questions it could not answer; never anything that looks like a phone number or an email address); which Call, Directions and Email buttons are tapped and which other websites are opened from ours; the language; the kind of device (phone, tablet or computer) and the website a visitor came from. No cookie, identifier or IP address is kept for this, so the totals cannot be traced back to a person; they are deleted after 400 days. If your browser sends Do Not Track or Global Privacy Control, nothing is counted.

Google Analytics, only if you accept. Once it is switched on, a banner asks you first. If you tap Accept, your browser loads Google Analytics from Google. It sets cookies (_ga, _ga_…) and tells Google which pages you open, how far you scroll, which links to other websites you open, how you reached the site, your device and browser, and your approximate location (town or city), so we can see how many people use the site and what they look for. Google Analytics does not log or store IP addresses. We keep Google signals, advertising features and data sharing with Google switched off, do not send Google what you type into the search box, and the detailed data is deleted after 2 months. If you tap Decline, or your browser sends Do Not Track or Global Privacy Control, nothing is loaded from Google. We rely on your consent for this, and you can change your choice at any time with Cookie settings at the bottom of every page; declining after accepting deletes the Google Analytics cookies on this site. Read how Google uses information from sites that use its services.

6. Your rights

Under the DPDP Act you have the right to:

• Access: get a summary of the personal data we hold about you, what we do with it, and who we shared it with (section 11).
• Correction and erasure: have it corrected, completed, updated or deleted (section 12).
• Withdraw consent at any time, as easily as you gave it (section 6(4)).
• Grievance redressal: complain to us and get an answer (section 13).
• Nominate another person to use these rights for you if you die or become unable to act (section 14).

Write to manapparai.com@gmail.com saying what you want, with enough detail for us to find the data, such as the listing, the date, or the email address or phone number you gave. We acknowledge your request within 24 hours and aim to answer within 7 days. The DPDP Rules, 2025 allow at most 90 days.

Votes and reports are stored only with a one-way code, so we usually cannot tell which ones are yours. If we cannot find or link data to you, we will tell you.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India. The Act asks you to use our complaints process first (section 13(3)).

When you use these rights, please give true information and do not make false or frivolous complaints (section 15).

7. Children

The site is for a general audience and is not aimed at children. Under the DPDP Act, a child is anyone under 18. If you are under 18, please do not send us submissions or contact details yourself; ask a parent or guardian to do it. If we learn that we hold a child's personal data without a parent's consent, we will delete it. We do not track children or aim targeted advertising at them.

8. How we protect it

We take these steps:

• The site is served over HTTPS, so what passes between your browser and the site is encrypted.
• Raw IP addresses are never stored; we keep only one-way codes made with a secret value.
• Requests are rate-limited, and forms and reports use the "verify you are human" check, to block abuse.
• Only the site owner and approved editors can open the admin area. It needs a password and limits failed logins, and contact details are shown only to the people who decide on submissions.
• Database keys and passwords are kept as secrets on the hosting platform, not in the site's code.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board, as the DPDP Act requires (section 8(6)).

9. Cookies and browser storage

Our own pages set no cookies for visitors. We save a few small things in your browser's local storage: your theme (light or dark), your language, your time format (railway time or AM / PM), your recent searches in the search box, your answer on the cookie banner, and your own vote on each listing so its button stays marked. They stay on your device and are not sent to us.

Google (Google Analytics if you accept it, Maps, and AdSense once it is switched on) and Cloudflare Turnstile may set their own cookies. The full list is in our Cookie & storage notice.

10. Advertising (Google AdSense)

We plan to show ads from Google AdSense. Until ads are switched on, no AdSense code runs on the site. Once they are on:

• Google and other third-party vendors use cookies to show ads based on your earlier visits to this site and to other websites.
• Google's advertising cookies let Google and its partners choose ads for you based on your visits here and elsewhere on the internet.
• You can turn off personalised advertising in Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info.
• Ad vendors and networks other than Google that serve ads on this site: [To be completed by the site owner: list them with links to their opt-out pages, or state that only Google serves ads].

Read how Google uses information from sites that use its services and how Google uses cookies in advertising.

11. Changes to this policy

When we change how we handle data, we update this page and the date at the top. If a change needs your consent, we will ask for it before the change applies to you.

This policy is published in English and Tamil. If the two versions differ, the English version applies.

12. Complaints

To complain about something on this site, a listing, or how we handle your personal data, email manapparai.com@gmail.com with the subject Complaint, and include:

• your name and a way to reach you;
• the web address of the page or listing, and what the problem is;
• whether the complaint is about you personally (for example your photo or your personal details), so we can act faster;
• anything that helps us check it, such as proof that you own the business.

You can write in Tamil or English. We acknowledge every complaint and reply as soon as we can. To fix a listing, you can also use Suggest a correction on the place page.

13. Contact

Email manapparai.com@gmail.com. For complaints, see Complaints.