Analytics runs by default
This site uses first-party analytics without a consent banner. You can erase the stored identifiers at any time by clearing this site's cookies in your browser.
Who we are
Central India Security & Services (CISS), MIG-11, Padmakar Nagar, Makronia, Sagar — 470004, Madhya Pradesh, India. Contact: drsangtomar@gmail.com · +91 99267 73460
What analytics is for
We use first-party analytics to:
- Understand which pages are visited and how often
- Measure call and WhatsApp button clicks (counts only — not who called)
- See approximate city/region distribution to understand our service-area reach
- Detect abuse and prevent automated flooding of our analytics
- Improve site content and deployment decisions
What we collect
Page path (/sagar/), button clicks (target ID + channel), engagement time, device class, browser/OS, viewport, referrer hostname, UTM, and approximate city/region derived from your current network address (IP is never shown to you or stored raw — masked/encrypted).
A random Browser ID and Session ID cookie link your clicks and page views across pages and visits into one journey (the dashboard's top-visitor table). These IDs are random — they contain no personal information, and clearing your cookies deletes them permanently.
What we never collect
- Names, phone numbers, or messages you type into the enquiry form
- Full URLs, query strings, or fragment identifiers
- Keystrokes, mouse movements, scroll recordings, or session replay
- GPS coordinates — unless you explicitly grant location permission when your browser asks (you can always deny; IP-based approximate location still applies)
- Device fingerprinting (canvas, WebGL, fonts, sensors, etc.)
- Any attempt to recreate an identifier you deleted
Browser ID ≠ Person
A “visitor” in our dashboard means one browser profile with a random ID — not a verified person or physical device. One person may appear as multiple visitors (different browsers, after clearing cookies, private browsing, or expiry). Multiple people sharing one browser appear as one visitor. The dashboard explains this.
Location is approximate
City and country are derived from your real network address — via our hosting provider's IP-location headers or a free public IP lookup service. It can be wrong, missing (“Unknown”), or reflect a nearby hub — never your precise address. If your browser asks for location access and you explicitly allow it, we additionally store that GPS fix and its reverse-geocoded city/region on your browser profile for up to 30 days (cached in your own browser storage, never re-prompted). You can deny the prompt at any time and analytics keeps working with the network-based approximate location.
Third-party analytics (PostHog)
We also use PostHog (posthog.com, US cloud) to visualize visits — page views, clicks, and device/location data derived from your network address. It runs with standard cookie/localStorage persistence from the first visit (analytics is on by default on this site — there is no consent banner). Its data is subject to PostHog's own privacy policy.
Cookies we use
| Cookie | Purpose | Lifetime |
|---|---|---|
| ciss_consent | Your analytics choice (yes/no) — same value for everyone making that choice | 180 days |
| ciss_bid | Random Browser ID (HttpOnly, not readable by page scripts) | 180 days |
| ciss_sid | Session ID, rolling 30-minute window (HttpOnly) | 30 min (rolling) |
All cookies use SameSite=Lax, Path=/, and Secure on HTTPS. Analytics is on by default on this site — no consent step is required.
How to clear your data
At any time:
- Clear cookies for www.ciss.co.in in your browser settings — this permanently deletes your Browser and Session IDs, so future visits start a fresh anonymous journey
- Previously collected events are retained until the retention period below, then deleted automatically
How long we keep data
| Data | Retention |
|---|---|
| Exact encrypted network address | 30 days, then ciphertext deleted |
| Events & masked network / approximate geo | 180 days |
| Inactive visitor/session rows with no retained events | 180 days of inactivity |
Who processes data
Analytics is hosted on Vercel (application hosting) and Turso (database). Both act as processors for this first-party analytics. No third-party advertising tracker is loaded before your consent. An embedded Google Map is replaced with a click-to-open link so no Google request happens until you explicitly open it.
Your rights
To make a privacy request (access, correction, erasure, grievance), contact us at the address above or email drsangtomar@gmail.com. We will respond in accordance with applicable law, including India's Digital Personal Data Protection Act, 2023 where applicable. This notice is not legal advice.
Changes
When this notice changes materially, the consent policy version above increments and returning visitors are issued fresh identifiers.
Questions about your data?