Privacy

Today's Tithi (todaystithi.com) is run by Shimtools. Write to hello@shimtools.com with any question or grievance about your data: it is our grievance contact.

Reading the panchang needs no account. This is all we keep, and why.

The reminder list

If you join, we keep:

• your email address
• the city and language you chose
• the page you signed up on
• the consent line you agreed to, and when
• when you confirmed, and in which language
• whether you are subscribed
• which reminders we have sent you, so none goes out twice
• the codes that make the links in our emails work

We use all of it only to send the emails the consent line describes: one the day before each Ekadashi fast, and one the day before each Purnima and Amavasya tithi begins, with the date and the tithi’s times for your city, in the language you signed up in. That is usually four emails a month. The basis is your consent, which you can withdraw at any time.

Confirming

Signing up sends one email with a link to confirm the address, and no reminder goes out until you confirm. If someone else typed your address, ignore that email and nothing more is sent. To change your city or language, sign up again with the new choice and confirm from that email; we send at most one confirmation email every 10 minutes.

Signup limits

So the form can’t be used to flood the list or someone’s inbox, we count signups from each IP address for an hour, and confirmation emails to each inbox for a day. We keep these counts only in a hashed form, use them for nothing else, and delete them when the hour or the day is over.

Analytics

Our hosting provider’s analytics count which pages are viewed, with the referring site, country, device and browser, and measure how fast pages load, in aggregate. They use no cookies, don’t follow you to other sites, and record page addresses without the codes our email links carry.

Google Analytics

Google Analytics measures how the site is used: which pages are viewed, for how long, the referring site, the device and browser, and an approximate location worked out from your IP address. It sets two cookies, _ga and _ga_<id>, which last up to two years and tell a returning browser apart from a new one. It sends page addresses without the codes our email links carry, and we have turned off its advertising and personalisation features. For visitors from the European Economic Area, the UK and Switzerland it sets no cookies. To stop it everywhere, install Google’s opt-out add-on.

Server logs

Our hosting provider keeps logs of requests for security and debugging. Our own code logs only what kind of error happened, never an email address.

The site itself sets no cookies. Google Analytics sets _ga and _ga_<id> (up to two years) to count returning visits, except for visitors from the European Economic Area, the UK and Switzerland. Our hosting provider’s analytics sets none. There are no advertising cookies.

Service providers handle the data on our behalf:

• our hosting provider, which serves the site and runs the cookieless analytics
• Google, for Google Analytics
• a cloud database provider, which holds the reminder list
• an email delivery provider, which sends the emails

The data may be processed outside India. We never sell or rent your address, or share it with anyone else.

• The reminder list: while you are subscribed.
• After you unsubscribe: only your address, when you left, your consent record and the unsubscribe code, so we never email you again and the link keeps working. We delete the rest, and those too if you write to us.
• An address never confirmed: it is never sent a reminder, and is deleted automatically 30 days after the signup or when the last confirmation link we sent expires, whichever is later.
• Confirmation links: 7 days.
• Signup limits: an hour for the counts by IP address, a day for the counts by inbox.
• Server logs: as long as our hosting provider’s policy keeps them.
• Google Analytics: at most 14 months, the longest retention Google Analytics allows for this data.

You can ask for a summary of the data we hold about you, have it corrected or brought up to date, or have it erased. You can withdraw your consent at any time: every reminder has an unsubscribe link (mail apps that support it also show a one-click button), and either takes effect at once; or write to hello@shimtools.com. You can also nominate someone to exercise these rights for you if you die or can no longer do so.

For any of these, or a grievance, write to hello@shimtools.com; we reply within 7 days. If we don’t resolve it, you can complain to the Data Protection Board of India.

The site isn’t meant for anyone under 18: please don’t join the reminder list if you are under 18. If we learn that we hold an address belonging to someone under 18, we delete it.

Pages are served only over HTTPS, with strict security headers. The codes in our email links can’t be guessed and work only for what they’re for: confirming or unsubscribing. Only the team that runs the site can reach the stored data.

The date at the top says when this notice last changed. We announce material changes on this page, and by email to subscribers when a change affects them.