Bombay Bhukkad
Privacy Policy
Last updated: 4 May 2026
We're a small editorial team writing about food and the city. We want to know which stories work and which don't. That's it. We don't sell your data, we don't profile you for ads, and we don't share with anyone we don't have to.
What we collect
- Anonymous analytics: page views, scroll depth, link clicks. Standard Google Analytics 4, Meta Pixel, and Cloudflare Web Analytics.
- If you sign up: name, email, phone (if you provide it), and which stories you save or comment on.
- If you apply to become a chef or write for us: the information you submit on those forms (KYC docs, FSSAI, UPI) — only used to verify and onboard you.
- Server logs: IP address and user agent, kept briefly for security and debugging.
Why
- To know what you're reading so we can write more of it.
- To send you the daily brief if you've signed up for Naka.
- To improve site performance and fix things that break.
- To attribute traffic to campaigns (UTM tracking) — so we know which newsletter, which social post brought you here.
Cookies we set
| Cookie | Purpose | Lifetime |
|---|---|---|
| cc_consent | Stores your accept/decline choice for analytics | 180 days |
| utm | Captures campaign source so we can attribute conversions | 30 days |
| _ga, _ga_* | Google Analytics — distinguishes anonymous visitors | 2 years |
| _fbp | Meta Pixel — distinguishes anonymous visitors | 90 days |
| bhukkad_user | localStorage — keeps you logged in (only if you sign in) | Until you log out |
Analytics cookies (_ga, _fbp) only set if you accept the consent banner. If you decline, no analytics cookies are stored — Google Consent Mode v2 ensures this.
Third parties
- Google Analytics 4 — page views, events. Their policy.
- Meta Pixel — Facebook/Instagram ad attribution. Their policy.
- Cloudflare Web Analytics — privacy-respecting traffic stats, no cookies. Their policy.
- Supabase — database + auth provider. Hosted on AWS Mumbai region.
- WhatsApp / Instagram — only when you click a share button. They see standard referer headers, nothing more from us.
We do not sell your personal data. We don't run ads against your profile. We don't share your contact information with marketers.
Your rights
Under India's Digital Personal Data Protection Act 2023 (DPDP) and equivalent laws elsewhere, you can:
- Access the personal data we hold about you.
- Correct inaccurate information.
- Delete your account and associated data — email us and we'll do it within 30 days.
- Withdraw consent for analytics — clear the
cc_consentcookie or email us. The banner will reappear. - File a complaint with the Data Protection Board of India if you're not happy with how we've handled your request.
Children
Bombay Bhukkad isn't intended for users under 18. If you're a minor, please don't sign up. If we discover we've collected data from a minor, we'll delete it.
Data retention
- Analytics: Google Analytics retains event data for 14 months, then aggregates it.
- Account data: kept until you delete your account.
- Server logs: 30 days.
- Chef applications: kept until verified or rejected; rejected applications are deleted within 90 days.
Changes to this policy
If we materially change how we handle data, we'll update this page and bump the date at the top. For account holders, we'll also email you.
Contact
Data requests, questions, complaints — email us at [email protected].
Bombay Bhukkad is operated by Infinite Shopping Pvt Ltd. We respond to data requests within 30 days as required by DPDP.