Privacy Policy

This Policy applies to the public pages of murvianlabs.com, including the home page and our product teaser pages.

It does not apply to:

• Our products. Aranor, our Android password manager, is governed by the Aranor Privacy Policy and the Aranor Terms & Conditions. Installing or using the app is a different relationship from reading this website, and the app's policy describes data the Site never touches.
• Third-party sites. If we link out, that destination's own policy applies once you leave.
• Distribution platforms. Google Play has its own policy covering what it collects when you view or install an app.

Where a product policy and this Policy both apply to something, the product policy controls for that product.

The Site has no account system, no newsletter, no comments, no search, and no contact form. There is nothing on it that asks you to type personal information, and we do not ask you to identify yourself to read any page.

Visiting the Site generates the ordinary technical information any web server receives:

• Server logs kept by our hosting provider: IP address, date and time of the request, the page or file requested, HTTP status, referring page where the browser sends one, and user-agent string identifying browser and operating system.

That is the complete list for an ordinary visit. We do not collect your name, email address, postal address, phone number, payment details, or location beyond the coarse, city-level inference an IP address allows. We do not ask for or receive special-category data.

If you choose to email us, we receive whatever your message contains — your email address, its content, and any attachment. That is information you send us deliberately, not something the Site collects.

The Site sets no cookies. It does not write to local storage, session storage, or IndexedDB, and it contains no tracking pixel, web beacon, fingerprinting script, session recorder, heat map, or advertising tag.

There is no analytics package of any kind — not ours and not a third party's. We do not measure page views, sessions, scroll depth, clicks, or conversions, and we have no dashboard showing who visited.

Because nothing non-essential is stored on your device, the Site shows no cookie banner and asks for no tracking consent. There is nothing to consent to and nothing to opt out of. Browser signals such as Global Privacy Control or Do Not Track require no action from us, since we do not perform the tracking they refuse.

Hosting

The Site is hosted on Firebase Hosting, operated by Google. Google receives and logs the request data described in section 2 as part of delivering pages to you, and operates a content delivery network that may serve you from a location near you. See Firebase Privacy and Security for its current practices.

Fonts on the Aranor page

Our Aranor teaser page loads one display typeface from Google Fonts. Requesting that font discloses your IP address and ordinary browser request metadata to Google, under Google's privacy policy. No other page on the Site loads it, and the Site makes no other third-party request — no external images, scripts, frames, video, or embedded content.

We have no other processors for the Site. There is no CRM, mailing platform, chat widget, tag manager, or advertising network involved in serving these pages.

• To deliver the Site: serve pages, images, and stylesheets to your browser. Legitimate interests, and necessary to respond to your own request for the page.
• Security and integrity: detect and respond to attacks, abuse, and outages using server logs. Legitimate interests in keeping the Site available and safe.
• Correspondence: read and reply if you email us. Legitimate interests, or steps taken at your request.
• Legal obligation: comply with applicable law and valid legal process.

We do not process Site data for advertising, profiling, automated decision-making that produces legal or similarly significant effects, or training AI models.

Under India's Digital Personal Data Protection Act, we process digital personal data for a lawful purpose. Under the GDPR and UK GDPR, our bases are legitimate interests and, where relevant, legal obligation.

We do not sell personal data, share it for cross-context behavioural advertising, or disclose it to data brokers. We have no advertising or affiliate relationships on the Site.

Site data may be disclosed only:

• to Google, as our hosting provider, in the course of serving pages, as described in section 4;
• where reasonably necessary to comply with law, valid legal process, or an enforceable request, or to protect safety, prevent fraud, or establish or defend legal claims; and
• in a merger, financing, acquisition, reorganisation, or asset sale, subject to confidentiality and this Policy.

MurvianLabs Private Limited is incorporated in India; Google operates globally. Site data may therefore be processed in India, the United States, and other locations where our hosting provider runs infrastructure. Where required, we rely on lawful transfer safeguards such as adequacy decisions or standard contractual clauses.

• Server logs: retained by our hosting provider under its own schedule and used by us only for security and troubleshooting. We do not copy them into a separate long-term store, and we do not attempt to link them to a named individual.
• Email you send us: kept as long as needed to handle your message and to keep a record of what was asked and answered, then deleted. Ordinarily this is no more than 24 months after the matter is closed, unless law or an ongoing matter requires longer.

We may retain the minimum records needed to demonstrate compliance, honour a request you have made, prevent fraud, or meet a legal obligation.

Depending on where you live, you may have rights to access personal data we hold about you, obtain a copy, correct or complete it, have it deleted, object to or restrict processing, withdraw consent, request portability, nominate another person where Indian law provides, appeal a refusal, and complain to a regulator — including the Data Protection Board of India or your local supervisory authority.

Two practical limits are worth stating honestly. First, we do not know who you are from an ordinary visit, and server logs are not organised by person; we generally cannot connect a log line to you without additional information from you, and we will not collect more data just to make you identifiable. Second, if you have never contacted us, we most likely hold nothing about you beyond those logs.

Use section 11 to make a request. We may need to verify your identity, or an agent's authority, before acting, and we will respond within the period the applicable law requires. You will not receive worse service for exercising a right.

The Site is a general-audience business website and is not directed to children. We do not knowingly collect personal data from children, do not track them, and do not use anyone's data for behavioural advertising. If you believe a child has sent us personal data, contact us and we will delete it.

We may update this Policy as the Site, our providers, or the law changes. We will post the revised version here with a new effective date. If we ever begin collecting something meaningfully different — adding analytics or a contact form, for example — we will update this Policy before or when that change goes live, and obtain consent where law requires it.

The data fiduciary and controller for the Site is MurvianLabs Private Limited, a company incorporated in India.

For privacy questions, rights requests, security reports, or grievances about the Site, email contact@murvianlabs.com with "Website Privacy" in the subject, and tell us what you are asking for and the country or state you are in.

Email is the designated channel for grievance redressal under India's Digital Personal Data Protection Act and for data-subject requests under the GDPR/UK GDPR and comparable laws. We acknowledge requests and address grievances within the period required by law. If a grievance remains unresolved, you may escalate to the regulator or appeal route available where you live.

For anything about the Aranor app rather than this website, use the contact route in the Aranor Privacy Policy.