Legal
Last Updated: August 24, 2026
This policy explains what personal information Imperialpedia collects, why, who we share it with, and the rights and choices you have over it. It describes our actual practices as of the date above — not a generic template.
Imperialpedia is operated by Baalvion Industries Private Limited ("we", "us", "our"). This policy applies to imperialpedia.com and related services.
We collect the following categories of information:
We do not collect payment card numbers, government ID numbers, or biometric data.
We use the information above to:
Where the GDPR applies, our legal bases are: your consent (non-essential cookies, newsletter, personalized advertising), our legitimate interests (running and securing the site, aggregate analytics), and legal obligation (responding to lawful requests).
We rely on the following providers. This list reflects what is actually integrated today:
We do not use a third-party newsletter platform (e.g. Mailchimp), a third-party form service (e.g. Typeform), or a third-party cookie-consent platform — the newsletter list, contact-form handling, and cookie-consent banner are all built and operated by us, on our own infrastructure.
When Google Analytics is configured for the site, it helps us understand which articles are read, how visitors navigate, and where to improve. It sets its own cookies (see the table above) and processes your IP address and on-site behavior on Google's servers. We use this in aggregate to improve content — we do not use it to identify you individually. Analytics only runs after you accept cookies, is disabled entirely if you decline, and always respects a Global Privacy Control signal (see below).
This site displays advertising served by Google AdSense. When you have consented to advertising cookies, Google may collect your IP address, cookie identifiers, and browsing activity on this and other sites to show personalized ads and measure their performance. If you decline, or send a Global Privacy Control signal, ads may still show but are non-personalized — based on the page's content and your approximate location, not your browsing history.
You can opt out of personalized advertising at any time:
We do not control what Google does with data once it processes it as an independent controller; see How Google uses information from sites that use its services.
Submitting the contact form sends your name, email address, subject, and message to our own internal notification system, which relays it as an email to our team so we can respond. It is not shared with any advertiser, analytics provider, or other third party, and is not added to the newsletter list unless you separately subscribe. We retain contact-form submissions as described in Data Retention below.
We do not currently embed third-party video players, social media posts, or other iframe-based embeds in our articles — our content sanitizer strips iframe tags from article bodies, so this isn't possible today even by mistake. If that changes, this section will be updated to name the specific providers and what they collect before any such embed ships.
You can opt out of the sale/sharing of your personal information for advertising purposes at any time using the control below. This has the same effect as declining the cookie banner: it revokes ad and analytics consent (Google Consent Mode v2) on this device/browser.
Global Privacy Control (GPC): if your browser or a browser extension sends a Global Privacy Control signal, we detect it automatically on your first visit and treat it as a valid opt-out request under the CCPA/CPRA — no separate action needed. Because the opt-out is stored per browser/device, you will need to opt out again on each device or browser you use, or if you clear your browser's local storage.
If you are in the European Economic Area or the United Kingdom, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time without affecting the lawfulness of processing before the withdrawal. You also have the right to lodge a complaint with your local data protection authority. See How to Submit a Request below.
If you are a California resident, you have the right to:
How to submit a request: email [email protected] with the subject "CCPA Request" — see how to submit a privacy rights request for what to include. Verification: because most of our data is tied only to an email address, we verify requests by confirming you control that email address (we will reply to the address on file, or ask you to confirm it) before acting on access or deletion requests. Response time: we aim to respond within 45 calendar days of a verifiable request, extendable once by another 45 days for complex requests, with notice to you of the extension.
Baalvion Industries Private Limited is incorporated in India, and processes personal data as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act). If it applies to your data, you (as a "Data Principal") have the right to: obtain a summary of the personal data we process about you and the processing activities; request correction, completion, updating, or erasure of your personal data; withdraw consent at any time (without affecting processing already carried out); nominate another individual to exercise your rights on your behalf in the event of death or incapacity; and file a grievance with us before escalating to the Data Protection Board of India.
Grievance Officer: reachable at [email protected] for any grievance or rights request under the DPDP Act.
To request access, correction, deletion, or an opt-out, email [email protected] and include:
We reply from the same address, which also confirms you control it. Response timelines: GDPR — within 30 days, extendable by up to 60 further days for complex requests; CCPA/CPRA — within 45 days, extendable once by 45 days; DPDP Act — without undue delay, in line with the timelines the Act and its rules prescribe.
We keep different categories of data for different periods, based on why we collected them:
We may retain information longer where required to comply with a legal obligation or resolve a dispute.
We use reasonable technical and organizational measures — including encrypted connections (HTTPS/TLS) and access controls on our backend systems — to protect the data we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Our backend infrastructure runs on AWS in India (Mumbai region). Our frontend is hosted on Vercel, which serves traffic through a global edge network that may process data outside India. Google Analytics and Google AdSense, when active, process data on Google's global infrastructure, primarily in the United States. Where we or our providers transfer personal data out of the EEA/UK, we and they rely on recognized safeguards such as the EU-U.S. Data Privacy Framework (Google is a certified participant) or Standard Contractual Clauses.
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you (for example, no automated eligibility, pricing, or credit decisions). Features like the watchlist and portfolio tracker simply display data you chose to save — they do not score, rank, or make decisions about you. Personalized advertising, where you've consented, uses standard interest-based targeting from Google, not a system we operate ourselves.
Imperialpedia is intended for a general, adult audience and is not directed at children. We do not knowingly collect personal information from anyone under 13 years old (the U.S. COPPA threshold), under 16 years old if you are in the EEA/UK (the GDPR default digital-consent age, which some member states set lower), or under 18 years old if you are in India (the DPDP Act's definition of a child, which requires verifiable parental consent for any processing). If you believe a child has provided us personal data, email [email protected] and we will delete it.
We update this policy when our practices change. Minor edits (wording, formatting) are reflected by updating the "Last Updated" date at the top without separate notice. For material changes — a new category of data we collect, a new purpose for using it, a new third party we share it with, or a reduction in your rights — we will post a visible notice on this page and, where we have your email address, notify you directly, at least 15 days before the change takes effect where practicable.