Privacy notice · v0.1 · 28 September 2026

Privacy

There are no cookies, no accounts, no analytics and no ad trackers on this site. Our tools keep what you type on your device. The only personal data we ever hold is what you send us yourself. This page says exactly what that means — and what your rights are.

At a glance
Who
LOFL (OPC) Private Limited, Pune — explore@lofl.world
Cookies · analytics
None. No pixels, no ad trackers, no third-party scripts.
The tools
Keep their marks, drafts and settings in your own browser. Never sent to us.
Reaches us only if you send it
An email, a WhatsApp message, or a form on this site — and the forms open your own email or WhatsApp app so you press send yourself.
The host
Netlify serves the pages and keeps ordinary server logs. Its servers are outside India.
Your rights
Ask what we hold, correct it, delete it. We reply within 30 days.
1

When you read the pages

Every page here is a static file. Our host, Netlify, serves it. Like every web server, Netlify records each request — your IP address, the page, the time, the kind of browser — in logs it keeps for a short period under its own privacy policy. We do not add anything on top: no analytics script, no tracking pixel, no cookie.

Fonts are served from our own domain, so no request goes to Google when a page loads. No page loads a script from another company. We check this — it is one of the facts the commons records for each tool.

The language offer

Some pages offer to show themselves in your language. The offer is worked out on your device, from the languages your browser already declares to every site it visits. Nothing is sent to us. If you accept, and your browser can translate on the device, the browser may fetch a language pack from its maker — Google, Apple or Mozilla, depending on the browser. That happens between you and your browser. Your choice is kept in your browser under the key lofl.lang, and “Forget my choice” removes it.

2

When you use a tool

The Living Learning Kit, ter-bot, Shabdayātrā, Aikā, the AI Usage Cards, LOFL Signal, the Atlas plates and the rest run entirely in your browser. There is no account and no server behind them. Marks, cards, drafts and view settings are kept in your browser's local storage, on your device, under keys that begin with lofl — and one in Shabdayātrā called shabda_count. They are never sent to us. We cannot see them, and we cannot recover them for you if you clear them.

To remove them: use the tool's own “Forget” or “Clear” button where it has one, or clear site data for explore.lofl.world in your browser's settings. Exports you download are files on your device, and yours alone.

The one exception, and it is yours to trigger

In Shabdayātrā, pressing “Look up” sends the single word you typed to the Wiktionary API, run by the Wikimedia Foundation. Wikimedia sees your IP address and the word, as any website you visit would, under its privacy policy. Nothing else you type, on any page, leaves your device.

3

When you write to us

This is the only time personal data reaches us, and it reaches us because you sent it.

HowWho carries itWhat to know
Email to explore@lofl.worldGoogle WorkspaceGoogle stores and transmits the mail under its own terms. We read it; nobody else does.
WhatsAppMetaThe forms on Get involved and the traces page, and the “follow” button on the action pages, do not send anything themselves. They open WhatsApp on your device with a message already written, and you press send. The message then travels on Meta's service, under Meta's terms, to a phone the Director holds. Share buttons work the same way, to people you choose — nothing comes to us.
The Signal and Sāṃvāda formsYour own email appThey draft a message and hand it to your email app. Only what you can see in the draft leaves — and only when you send it.

What we keep, and for how long

  • What: your name, the contact details you gave, your organisation if you named it, and what you wrote.
  • Why: to answer you and to do the work you asked about. Nothing else.
  • How long: while we are in touch, and for up to two years after the last message in case the thread picks up again. Then it is deleted. Ask, and it goes sooner.
  • Who sees it: the Director. An intern or partner only when you are asking for something they will do — and then only what they need.
  • Never: sold, shared for marketing, or added to a list you did not ask to join. We share it only if the law makes us, and we tell you unless the law forbids that.
4

Public records — traces and Signal

The traces page publishes what citizens asked about CSR money in their district, and what came back. We publish the district and the reply, with its source. Never your phone number or email — and a credit only if you asked for one, in the words you chose.

The Signal form asks for contact details only if you want a reply, and only sends what you can see in the draft. If you describe a classroom, keep children unnamed; we remove identifying details on arrival regardless.

You can withdraw any record. Write to explore@lofl.world with “Withdraw” in the subject and it comes down, no questions asked. What others copied while it was up, we cannot recall.

5

Children

We never knowingly collect a child's personal data. Our tools are built so that a child's marks stay on the device they were made on. Where a programme records anything about a child, a parent or lawful guardian must consent in writing first, and the child safeguarding policy applies in full — including the ban on tracking, profiling and advertising aimed at children.

If you believe we hold a child's data without consent, write to childcare@lofl.world. We delete it and tell you when it is gone.

6

Your rights

India's Digital Personal Data Protection Act, 2023 gives you rights over personal data an organisation holds about you. The rules under the Act were notified in November 2025 and come fully into force by May 2027. We honour these rights now, and not because a deadline made us:

  • Ask what we hold about you, and get a copy.
  • Ask us to correct it, or to complete it.
  • Ask us to delete it.
  • Withdraw a consent you gave, as easily as you gave it.
  • Name someone to act for you if you cannot.

Write to explore@lofl.world with “Privacy” in the subject. The person who answers is Mrunmai Patil, Director. We reply within 30 days — usually much faster; there is one person answering, not a queue. If we cannot do what you ask, we say why.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

7

Security, and what happens if something goes wrong

Static files, no database, no accounts: the most common ways a website leaks personal data do not exist here. What we do hold lives in one Google Workspace mailbox and on one phone, both kept behind two-step verification.

If personal data we hold is ever exposed, we tell the people affected and the Data Protection Board, as the rules require, and we write up what happened on this page. We do not bury it.

8

Where the data lives

  • Netlify hosts the site. Its servers are outside India.
  • Google Workspace holds our mail, in data centres that may be outside India.
  • Meta carries WhatsApp messages on its own servers, outside India.

We do not move your data anywhere else, and we use no other processor. If that changes, this page changes first.

9

Changes

This page is the record. Every change is dated below, and nothing is quietly rewritten. The Director owns it and reviews it at least once a year, and whenever the site starts doing something new with data.

Honest state: this is v0.1, written by the studio and not yet reviewed by a lawyer. If you see a gap, tell us.

Change log

  • v0.1 · 28 September 2026 — first published version. Written after the September 2026 pass that moved the fonts and the chart library onto this domain, so that “nothing tracks you” is true on every page, not most of them.