Legal
Privacy policy
We collect as little as we can, we never sell it, and we delete things on a schedule. Here's exactly how, written with India's Digital Personal Data Protection Act, 2023 in mind.
Last updated: 2 November 2026
What we collect
- Your account: your email, and your name and profile photo if you sign in with Google.
- Your pages: the words, photos, stickers and music choices you add, plus the replies people send.
- Payments: Razorpay handles your card or UPI details. We only keep the order ID, amount and status.
- Basic security data: a scrambled, daily-changing fingerprint of your IP address (never the address itself), used to stop spam and abuse.
- Visit counts: we count estimated daily unique visitors using that same one-way, daily-changing hash of your IP address, so we can't link your visits across days or to you. Your browser keeps a small note in local storage (the date of your last counted visit, and whether you've dismissed the feedback card). It never leaves your device.
- Where you came from: the referral cookie (
dilse_ref) remembers which shared page brought you here, to count recipients who go on to make their own page. A second cookie (dilse_first, kept 90 days) remembers only the kind of site you first came from (for example "instagram") and the name of our ad or post, if the link had one, so we know which of our posts actually help. It never holds your name, the page you made, or the link you clicked. - Contact form: your name, email and message, so we can answer you.
- Ratings: the score and comment you leave after publishing are anonymous. We don't store your name, email or page with them, so please don't include personal details.
People who receive a page
They don't need an account. If they reply, we store the reply for the page's creator to see. We count views with a small cookie so one person opening the page twice counts once. No ad trackers ever run on shared pages.
Why we use it
To run DilSe: sign you in, show your page to people with the link, show you their replies, send you sign-in codes and reply alerts, take payments, and keep the service safe. We use your data based on your consent, which you give when you sign up. We don't use it for advertising and we don't sell it.
Who we share it with
Only the services that help us run DilSe: hosting (Cloudflare and our API host), database (Neon), file storage (Cloudflare R2), email (Resend), payments (Razorpay), bot protection (Cloudflare Turnstile) and error tracking (Sentry, with message content removed). Some of them may store data outside India.
How long we keep it
- Every page, free or paid: its photos, voice note and message are deleted 7 days after the page ends (your dashboard shows a countdown). The replies are deleted 30 days after it ends.
- After that, only the page's title (for example "For Riya") stays on your dashboard, until you delete it.
- Deleted pages: cleared within 7 days.
- Sign-in codes: 1 day. Abuse reports and contact-form messages: 1 year.
- Daily visit counts: about 13 months.
- Payment records: kept as long as the law requires for accounting (up to 8 years).
Your rights
You can ask to see, correct or delete your data, or withdraw your consent, at any time. You can delete any page yourself from your dashboard. For anything else, email rexocreation@gmail.com and we'll reply within 7 days.
Deleting your account: go to Account → Delete your account. Your pages stop opening straight away, and we remove your pages, photos, replies and sign-in details, usually within a day. We keep payment records (Razorpay IDs, amounts, dates) as long as the law requires for accounting.
Age
DilSe is only for people 18 and older. We don't knowingly collect data from children.
Grievance officer
Abhishek. Email: rexocreation@gmail.com. If you're not happy with our answer, you can complain to the Data Protection Board of India.