1. Who we are
This website, sushmitasrivastava.com, is operated by Sushmita Srivastava, an independent playback singer based in India. It exists to present her music and link to the streaming platforms that host it.
For any question about this policy, or about data held about you, write to sri@sushmitasrivastava.com.
2. What data we collect
From visitors to this website
This site has no contact form, no account system, no newsletter sign-up and no advertising or analytics scripts. We do not ask you for your name, email address or any other personal detail, and we do not build a profile of you.
Like almost every website, the web server records a standard access log for each request. Those entries contain:
- your IP address
- the date and time of the request
- the page or file requested
- your browser and operating system, as reported by your browser
- the page that referred you, when your browser sends one
These logs exist to keep the site running and secure — diagnosing errors, and identifying abuse such as automated attacks. They are not used to identify individual visitors, are not combined with any other data, and are not sold or shared.
From embedded content
The home page embeds one video player from YouTube. We use the youtube-nocookie.com domain, which does not set advertising cookies until you actually start playing the video. Once you press play, YouTube receives your request directly and its own privacy policy applies to that interaction. We receive nothing from it.
The site loads fonts from Google Fonts and an icon set from jsDelivr. Those services receive your IP address as a technical requirement of delivering the files, in the same way any external file request works. Neither is used by us for tracking.
From Sushmita's own social media accounts
This is the part that matters for platform reviewers.
Sushmita uses a private, self-hosted system to publish her own content to her own accounts on YouTube, and — where enabled — Instagram, Facebook, Threads and WhatsApp. That system holds access tokens she has personally granted through each platform's official authorisation flow.
Those tokens are used for exactly one purpose: publishing content Sushmita has created, and reading the public performance figures and comments on her own posts.
We do not collect, store, analyse or sell data about the people who follow, view or comment on those platforms beyond what is publicly attached to a comment on her own posts (a public display name and the comment text), which is used only so she can read and reply to her audience.
We do not access other users' private data, friend lists, direct messages, or any information belonging to anyone other than Sushmita herself. Tokens are stored on a private server with file permissions restricting them to the system owner, and are never shared with third parties.
3. Cookies
This website sets no cookies of its own — no tracking cookies, no advertising cookies, no analytics cookies.
The private administrative dashboard used to manage the music catalogue sits on a separate subdomain and is not part of this website. It sets a single session cookie for the signed-in operator, which does nothing but keep that person logged in. Visitors to this site never receive it.
4. Third-party services
Clicking a streaming link takes you to a third party, whose own terms and privacy policies then apply. We have no control over, and take no responsibility for, how they handle your data. The services linked from this site are:
- Google / YouTube — video hosting, embedded player, YouTube Music
- Spotify — music streaming
- Apple Music — music streaming
- JioSaavn — music streaming
- Meta — Instagram and Facebook profile links
- Google Fonts and jsDelivr — fonts and icons used by the page
5. How long data is kept
- Server access logs — retained for up to 30 days, then rotated and deleted automatically.
- Comments read from her own posts — retained while the related post is published, so replies can be managed.
- Platform access tokens — retained until Sushmita revokes them or they expire.
Nothing on this list is retained for advertising or profiling, because we do neither.
6. Your rights
Under India's Digital Personal Data Protection Act, 2023, and under the EU and UK General Data Protection Regulation where it applies to you, you have the right to:
- ask what personal data we hold about you
- ask for it to be corrected
- ask for it to be deleted
- object to its processing, or ask that we restrict it
- complain to your data protection authority
In practice we hold very little: unless you have commented on one of her posts, a server log entry containing your IP address is likely to be the only record that exists, and it is deleted within 30 days.
To make any of these requests, email sri@sushmitasrivastava.com. We will respond within 30 days. We may need to ask for information confirming your identity before acting on a request about personal data.
7. Children
This site is not directed at children and does not knowingly collect data from anyone under 18.
8. Changes to this policy
If this policy changes, the revised version will be posted on this page with a new date below. Material changes to how data is used will be described rather than made quietly.
9. Governing law
This policy is governed by the laws of India, and the courts of India have jurisdiction over any dispute arising from it.
10. Contact
Privacy questions and data requests: sri@sushmitasrivastava.com
General and booking enquiries: sushmita1317@gmail.com