Privacy
Last updated 30 September 2026.
This policy covers dynshift.com. PhonePad and LAYR have their own sites and their own policies, built on the same rules: PhonePad, LAYR.
Who is responsible
DynShift, an independent software studio based in India, decides what this site collects and why. In the terms of the GDPR it is the controller; in the terms of India's Digital Personal Data Protection Act 2023 it is the Data Fiduciary. Write to official@dynshift.com about anything here; the contact and grievance page says how requests are handled.
In short
- No accounts, no forms, no newsletter.
- Visits are counted with Google Analytics only if you allow it. Until then nothing is loaded from Google Analytics.
- The site carries advertising from Google AdSense. In the EEA, the UK and Switzerland Google asks for your consent first; in US states with privacy laws you can opt out of the sale or sharing of your data; a Global Privacy Control signal from your browser is honoured everywhere.
- DynShift never sells personal data and receives none from Google's advertising.
What is collected, and why
| What | Why | Basis | Who handles it |
|---|---|---|---|
| Your IP address and browser details, in server logs | Delivering the pages and keeping the host secure | Legitimate interest | GitHub Pages, which hosts the site. DynShift does not receive these logs. |
| Your privacy choice, in your browser's local storage | Not asking you again | Strictly necessary | Your device only |
| Pages viewed, referrer, device type, approximate country, a random visitor identifier | Counting visits and seeing which pages help | Your consent | Google Analytics, on DynShift's behalf |
| Advertising identifiers in cookies, the page, approximate location | Showing, measuring and protecting advertising; personalising it where allowed | Your consent in the EEA, the UK and Switzerland; elsewhere Google's and DynShift's legitimate interest, with the opt-outs below | Google, as an independent controller |
| Your name, email address and message, if you write to us | Answering you | Legitimate interest, or taking steps you asked for | DynShift |
Analytics
Google Analytics 4 loads only after you allow it: in the EEA, the UK and Switzerland through Google's consent message, elsewhere through a two-button question from this site. Google Analytics does not store your IP address; it uses it to estimate your country and then discards it. Google signals and detailed location and device data are switched off, and event data is kept for two months. See how Google uses information from sites or apps that use its services.
Advertising
Advertising on this site is supplied by Google AdSense. A few long-form pages carry one advertisement each, labelled Advertisement. There are none on the home page and none on this or any other legal page. Google may set cookies or read similar identifiers to serve, measure and protect those advertisements, and, where you have allowed it, to personalise them. Google handles that data under its own policy: how Google uses information from sites or apps that use its services. The cookies are listed on the cookies page.
Your choices
- Privacy settings, in the footer of every page, shows what applies to you and lets you change it at any time. Withdrawing consent is as easy as giving it.
- EEA, UK, Switzerland: Google's consent message asks on your first visit, with "Consent", "Do not consent" and "Manage options". Nothing that needs consent is used before you answer.
- US states with privacy laws: use Do Not Sell or Share My Personal Information in the footer (it appears where it applies). Advertising then stops being personalised for you.
- Global Privacy Control: if your browser sends it, this site treats it as an opt-out everywhere: no analytics and no personalised advertising.
- Anywhere: turn off personalised ads for your Google account at My Ad Center, block or delete cookies in your browser, or use an ad blocker. The site works the same; nothing here detects or complains about it.
How long it is kept
- Your privacy choice: up to 12 months in your browser, then you are asked again.
- Analytics event data: 2 months at Google; only totals remain after that.
- Advertising cookies: as listed on the cookies page, set and expired by Google.
- Emails: while the conversation is active, then deleted within 12 months of the last message unless needed for a legal claim.
Who else receives data, and where
Google (advertising and analytics) and GitHub (hosting). Both process data in the United States and elsewhere, under their own safeguards for international transfers, including the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Nobody else receives personal data from this site.
Your rights
Wherever you are, you can ask DynShift what it holds about you, and ask for it to be corrected or deleted, by writing to official@dynshift.com. You will have an answer within 30 days. In practice DynShift holds nothing about a visitor except emails they send; analytics data is not linked to a name, but it can be deleted if you give your Google Analytics client identifier; data held by Google's advertising is Google's to answer for, through My Ad Center and Google's own request forms.
India (DPDP Act 2023)
As a Data Principal you may ask for a summary of your personal data and how it is processed, and for its correction, completion, updating or erasure; withdraw consent at any time, as easily as you gave it, without affecting processing before the withdrawal; nominate someone to exercise your rights if you die or become unable to; and have a grievance answered. Raise a grievance first with DynShift through the contact and grievance page; if you are not satisfied, you may complain to the Data Protection Board of India. If you would like this notice in English or any language in the Eighth Schedule to the Constitution, write to us and we will provide it.
EEA, UK and Switzerland
You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. You may complain to your data protection authority (in the UK, the ICO; in Switzerland, the FDPIC).
United States
DynShift does not sell personal data for money. Advertising cookies can count as "sharing" or "targeted advertising" under some state laws; opt out as described above. DynShift does not knowingly process sensitive data.
Brazil, Canada and elsewhere
The same rights of access, correction and deletion, and the same choices, apply to you. Write to official@dynshift.com.
Children
This site is not directed at children and DynShift does not knowingly collect data from anyone under 18. If you believe a child has written to us, tell us and the message will be deleted.
Security and breaches
The site is static and served over HTTPS; there is no database to breach. If personal data DynShift holds (such as email) is ever exposed, the people affected will be told promptly, and regulators will be notified where the law requires it.
Changes
When this policy changes, the date at the top changes with it. The site's source, including every version of this page, is public on GitHub.