Privacy Policy
_Last updated: 28 July 2026_
This policy explains how Defaulter List ("we") handles personal data on Defaulter List (https://www.defaulterlist.in).
1. Data we collect
From registered users: name, email address, hashed password (we never store passwords in readable form), and — if you sign in with Google — your Google account ID, name, email and profile picture.
From reports you submit: everything you choose to enter, which may include the name, photograph, company, location, email address and telephone number of a third party, together with your written account and any amounts.
Automatically: pages visited, referring website, approximate location derived from IP (country/region/city), device type, browser and operating system. We store a salted, irreversible hash for visitor counting — we do not retain raw IP addresses in our analytics records.
From the contact form: your name, email, subject and message.
2. Important notice about third-party personal data
If you submit a report you are publishing personal data about another identifiable person. You — not the Platform — are the controller of and responsible for that data. You warrant that you have a lawful basis for publishing it, and you indemnify us in respect of it under our Terms. Do not submit sensitive personal data such as bank account numbers, government identity numbers, health information, or data concerning a minor.
3. Why we process data
- To operate accounts, authenticate sign-in and verify email addresses.
- To publish, moderate and display user-submitted reports.
- To notify a person named in a report that a listing concerning them exists,
- To measure traffic and improve the service.
- To respond to enquiries, complaints and legal notices.
- To detect, prevent and address abuse, fraud and security incidents.
- To comply with law and to establish, exercise or defend legal claims.
so that they may exercise a right of reply (where that feature is enabled).
Our lawful bases are, as applicable: performance of a contract, your consent, compliance with a legal obligation, and our legitimate interests in operating a functioning platform and protecting it from abuse.
4. Cookies and tracking
We set a strictly necessary, httpOnly session cookie to keep you signed in. Where enabled by the site operator we may also load Google Analytics, Google Tag Manager, Google Ads and Meta Pixel, which set their own cookies and process data under their own privacy policies. You can block cookies in your browser, though the sign-in cookie is required to use an account.
5. Sharing
We share data with: our hosting and database providers (Vercel, Neon) as processors; our email provider, where configured; analytics and advertising providers, where enabled; and law-enforcement, courts or regulators where we are legally required or where disclosure is necessary to establish, exercise or defend legal claims. We do not sell personal data.
Where we receive a legal notice concerning a listing, we may disclose the notice — and, where lawfully required, information about the user who posted it — to the complainant or to a competent authority.
6. Retention
Account data is kept while your account exists. Published reports remain until deleted by their author or by us. Analytics records are retained for up to 24 months. Email verification codes expire within minutes and are purged.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, port or object to processing of your personal data, and to withdraw consent. Exercise them by writing to legal@defaulterlist.in.
If you are named in a report and want it removed: please read our Disclaimer and the takedown procedure in our Terms. Because the report was authored and is controlled by another user, the quickest route is normally to contact that user directly. We will assess properly substantiated requests under our notice-and-takedown process.
8. Security
We use encrypted connections, hashed passwords (bcrypt), httpOnly session cookies and access controls. No system is perfectly secure, and we cannot guarantee absolute security.
9. International transfers
Our providers may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
10. Children
The Platform is not intended for anyone under 18 and we do not knowingly collect their data.
11. Changes
We may update this policy by posting a revised version with a new date.
12. Contact
legal@defaulterlist.in