Last updated: 27 October 2026
Decode Agent (“we”) is a personal project from India that decodes everyday technology, one case at a time. This notice explains what happens to your information when you request clearance on decodeagent.studio. We keep it short because we collect very little.
What we collect
- Your email address, which you type in yourself.
- Approximate location: your country and state or region, worked out from your IP address when you sign up. We store only the country and region. We do not store your IP address.
- The time you signed up, which is our record of your consent.
- Your Agent ID, a random-looking code we generate for you.
- How you found us: the campaign tag on the link you arrived from (for example “instagram” or “whatsapp”), the name of the website that sent you (not the page), and the first page of this site you saw. Stored with your signup so we know which channels bring agents.
That is everything. No name, phone number, address, password or payment details.
Separately, the site counts a few actions anonymously (a case opened, a video played, Agent Mode switched on, a signup started or finished) with the page and your country. These counts carry no identifier and no IP address, use no cookies, and can’t be linked to you or your email.
Why we use it
- To tell you when a new case is decoded, and about tools or products we release.
- If you ask to hear about Gear (the Gear page’s request), to email you about Gear once updates begin. We note that choice next to your email, and you can withdraw it at any time.
- To keep the list free of bots, fake addresses and throwaway inboxes.
- To understand, in total numbers, where interest is coming from.
We do not sell your data, rent it, or share it with anyone for advertising.
Your consent
We rely on your consent, which you give by submitting your email (Digital Personal Data Protection Act, 2023). You can withdraw it at any time and we will remove you from the list. The intake is for people aged 18 and over.
Who helps us run this
These services process data for us only to provide their service, under their own security commitments:
- Vercel hosts the website and provides privacy-friendly visit counts that use no cookies and no personal identifiers.
- Supabase stores the signup list, in its Mumbai, India data centre.
- YouTube (Google) plays a case’s video on its page, but only after you tap play. Until then the page shows our own preview and nothing loads from YouTube. The player comes from YouTube’s privacy-enhanced domain (youtube-nocookie.com); once it plays, YouTube’s own privacy policy applies.
- Cloudflare runs Turnstile, an invisible check that tells people from bots by looking at signals from your browser. Cloudflare also runs our domain’s DNS and our email inbox.
Cookies and storage
We set no advertising or tracking cookies. Your browser remembers whether you switched on Agent Mode, and the campaign tag and referring website of your first visit. Agent Mode never leaves your device; the campaign details are sent to us only if you sign up. Turnstile may use the minimum it needs to detect bots.
How long we keep it
Until you ask us to remove you or unsubscribe. If Decode Agent ever stops, we delete the list.
Security
Data is encrypted in transit (HTTPS) and at rest. The signup list can be reached only by our own server. The public website cannot read it.
Your rights
You can ask to see the data we hold about you, correct it, have it erased, or withdraw your consent. You can also nominate someone to act for you and raise a grievance. Email hq@decodeagent.studio from the address you signed up with, and we will act on your request within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
Changes
If we change this notice, we will update the date above. We will never use your data for something new without asking you first.