This site collects nothing except what you choose to write to us.

This page, and the rest of the informational site it belongs to — the pages served under meditation-analyser.test.narnarayan.org/information. That is a public brochure: it explains what Delve does and how it reaches its conclusions, and it has no accounts, no login and no database behind it.

The Delve product itself — the dashboard a teacher and their students sign in to, where EEG sessions are recorded and replayed — is a separate, authenticated application with its own handling of session data. Nothing on this page describes it, and nothing here should be read as a statement about how practice recordings are stored, shared or protected in that application.

Only the contact form, and only when you send it. Four fields: your name, your email address, your organisation (optional, and you can leave it blank), and your message. Whatever you type in those boxes is the whole of it.

The form also carries one hidden field that a person never sees and can never reach with the keyboard. It exists to catch automated submissions. If it arrives filled in, the message came from a bot; it holds nothing about you.

Nothing is stored in your browser: this site sets no cookies of its own, writes nothing to local storage, and keeps no identifier for you between visits. Like any website, the server that hands these pages to your browser may keep ordinary request logs — an address, a timestamp, which file was asked for — as part of running and securing the machine. Those are operational logs. They are not read as an audience, and no profile is built from them.

There is no analytics on this site — no page-view counting, no heatmaps, no session recording. No advertising or measurement pixels. No cookie banner, because there are no cookies to consent to. No fonts, scripts, maps, videos or social widgets loaded from anyone else’s server: the typefaces and the audio clips are served from this domain, so visiting this page tells no third party that you did.

Nothing you send is used for marketing, added to a mailing list, sold, or passed to anyone for their own purposes.

One reason only: so that we can read your message and reply to it. There is no second use.

Under UK GDPR the lawful basis is legitimate interests — you wrote to us and want an answer, and answering is the ordinary expectation on both sides. Where you would rather treat it as consent, that works too: sending the form is the act of consent, and asking us to delete the message withdraws it.

When you press send, the form posts your message to an endpoint on this same domain. Nothing is written to a database there. The endpoint composes an email and hands it to Resend, an email delivery service, which transmits it to a personal mailbox read by the person who builds Delve. The reply-to address on that email is set to yours, so a reply goes straight back to you and nowhere else.

Resend is the only sub-processor involved, and its role is transmission — it carries the message the way a postal service carries a letter. Resend is a US company, so your message passes through servers outside the United Kingdom on its way to the inbox. If you would rather it did not, email the address at the bottom of this page directly instead of using the form.

Your message stays in the mailbox as an ordinary piece of correspondence, for as long as the conversation is still useful — typically no longer than two years from the last reply, after which it is deleted along with the rest of the thread.

You do not have to wait for that. Ask, and it goes sooner.

Because this is a UK project, UK GDPR applies. You can ask to see what we hold about you, to have it corrected, to have it erased, to restrict what is done with it, to object to it being held at all, and to receive a copy in a portable form. In practice, for this site, all of that amounts to one thread in one mailbox — so a request is usually answered the same week and is never charged for.

If you think a request has been handled badly, you can complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk. You are welcome to raise it with us first, but you are not obliged to.

Email nishchaybhudia@gmail.com. That is the same mailbox the contact form delivers to — there is no separate privacy desk, because there is no one else here to route it to.

Delve is a small project rather than a registered company, so this page names no company number, no postal address and no data protection officer. Publishing ones that do not exist would be worse than admitting that. The person who built the site is the person who reads the mailbox and answers the request.

The date at the top is the whole changelog. If what the site does ever changes — if it grows analytics, or a login, or anything that sets a cookie — this page changes first and that date changes with it.