Policies
Privacy policy
What personal data 2search collects, why, who we share it with, how long we keep it, and how to use your rights under India's DPDP Act, the GDPR and US state laws.
On this page
The short version
- You don't need an account to read 2search, and we never ask for your name, phone number or payment details.
- When you visit, our hosting provider records basic technical data (like your IP address and browser) to keep the site running and safe.
- Analytics and personalised ads only run with your OK in India, the EU, the UK and Switzerland. Elsewhere you can turn them off any time in cookie settings.
- We don't sell your personal data. We don't use it to decide anything important about you.
- You can ask us to see, correct or delete your data, or withdraw consent, by writing to privacy@2search.in.
Who we are and what this covers
2search.in ("2search", "we", "us") is a website that publishes researched articles, guides and calculators. For the personal data described here, 2search is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025, and the controller under the EU and UK GDPR. The companies that host the site and send us email act as our Data Processors.
When the Indian rules apply: the DPDP Rules, 2025 were notified on 13 November 2025 and come into force in stages. Most duties — notices like this one, security safeguards, breach reporting and your rights — apply from 13 May 2027. We already follow them today.
This policy covers 2search.in, its search box, its public API and the emails you send us. It doesn't cover other websites we link to — they have their own policies.
| Questions about your personal data | privacy@2search.in — answered by our grievance officer |
|---|---|
| Grievance officer | Grievance Officer, 2search — grievance@2search.in (details) |
What we collect
| What | Examples | When |
|---|---|---|
| Technical data | IP address, browser and device type, pages requested, date and time, the page you came from | Every visit (recorded by our hosting provider) |
| Cookie and device data | Cookie IDs, approximate location (country/city from IP), pages read, how long you stayed, ad interactions | Only for the cookie types you allow — see the cookie policy |
| Your settings | Cookie choices, light/dark theme, search mode | Saved in your own browser |
| Consent record | A random ID, what you chose, the time and your country | When you make a cookie choice |
| Messages you send | Your email address, name (if you give it) and what you write | When you email us |
| Search queries | Words you type in the search box | Search runs in your browser; queries to our public API may appear briefly in server logs |
| Calculator inputs | Income, loan amounts, rates you type into our calculators | Never sent to us — calculators run entirely in your browser and nothing is saved |
We don't collect sensitive data such as health, financial account, government ID or religion details. Please don't send them to us. We don't knowingly collect data from children (see below).
How we use it, and why we're allowed to
| Purpose | Data used | Legal basis |
|---|---|---|
| Run the site, show pages, keep it fast | Technical data | DPDP: legitimate use to provide the service you asked for. GDPR: legitimate interests |
| Keep the site secure, stop abuse and spam | Technical data | DPDP: legitimate use (security). GDPR: legitimate interests |
| Understand which articles help (Google Analytics) | Cookie data | Your consent (India, EU, UK, Switzerland); elsewhere you can opt out |
| Show ads that keep 2search free (Google AdSense) | Cookie data, technical data | Non-personalised ads: legitimate interests. Personalised ads: your consent where required, with an opt-out elsewhere |
| Remember your choices | Your settings, consent record | Needed to respect your choices (legal obligation) |
| Reply to you, fix errors you report | Messages | Your request (consent), legitimate interests |
| Meet legal duties | Any of the above, as required | Legal obligation |
We don't use your data for automated decisions that have legal or similarly important effects on you.
Who we share it with
We only share data with service providers who help run 2search, and only what they need:
| Provider | What they do | Where |
|---|---|---|
| Vercel Inc. | Hosts the website and keeps short server logs | USA and global edge network |
| Google LLC / Google Ireland | Google Analytics (if you allow it) and Google AdSense ads | USA and other countries |
| Our email provider | Receives and stores emails you send us | As per provider |
Google AdSense: Third-party vendors, including Google, use cookies to show ads based on your earlier visits to 2search or to other websites. Google's advertising cookies let Google and its partners show you ads based on those visits. Google may also use your IP address to show and measure ads, including when cookies are off. For ads, Google acts as an independent controller of the data it collects. Learn how Google uses data from sites that use its services, or turn off personalised ads in Google's My Ad Center. You can also opt out of some vendors at aboutads.info and, in the EU, at youronlinechoices.eu. Other ad companies Google works with are listed in Google's ad technology providers.
We may disclose data if the law requires it, to protect people's safety, or as part of a sale or merger of the website (with this policy still applying). We don't sell personal data and we don't share it for cross-context behavioural advertising other than through Google's ad services described above, which you can turn off.
Data sent outside India and the EU
Our providers may process data in the USA and other countries. Where the GDPR applies, they rely on safeguards such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. Transfers from India follow the DPDP Act and any country restrictions the government notifies.
How long we keep it
| Data | How long |
|---|---|
| Server and security logs (technical data) | Up to 1 year, then deleted. From 13 May 2027 India's DPDP Rules require at least 1 year, to detect and investigate security problems |
| Google Analytics data | 14 months, then deleted automatically |
| Advertising cookies | Up to 13 months (set by Google); see the cookie policy |
| Your cookie choice | 12 months, then we ask again |
| Consent records | At least 1 year after your choice, so we can show consent was given |
| Emails you send | Up to 2 years after our last exchange, unless you ask us to delete them sooner |
When data is no longer needed, we delete it or make it anonymous.
Your rights
You can use these rights for free. We may ask you to confirm your identity first (for example by replying from the same email address).
If you're in India (DPDP Act, 2023)
- Access a summary of your personal data and how we use it, and who we've shared it with
- Correct, complete or update your data
- Erase your data when it's no longer needed or you withdraw consent
- Withdraw consent at any time — as easily as you gave it, from cookie settings
- Grievance redressal — we acknowledge within 24 hours and reply within 30 days at the latest, usually much sooner (the DPDP Rules allow up to 90 days)
- Nominate someone to use your rights if you die or can't act yourself
If you're not satisfied with our answer, you can complain to the Data Protection Board of India, a fully digital body. You need to use our grievance process first. The Board's powers to hear complaints start on 13 May 2027.
Under the DPDP Act you also have a few duties: please don't pretend to be someone else when you make a request, don't hide important information, and don't file false or frivolous complaints.
If you're in the EU, UK or Switzerland (GDPR)
You have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent at any time. You can also complain to your local data protection authority. We reply within one month.
If you're in the USA (California and other states)
Depending on your state, you can ask to know what we collect, delete or correct it, and opt out of the sale or sharing of personal data and targeted advertising. We don't sell data for money, but some ad cookies may count as "sharing" — turn them off on your privacy choices. We honour the Global Privacy Control (GPC) browser signal. We won't treat you differently for using your rights, and you can use an authorised agent.
How to make a request
Email privacy@2search.in with:
- What you'd like us to do (see, correct, delete, or withdraw consent)
- Your country or state
- Anything that helps us find your data (for example the email address you wrote from, or your consent ID shown in cookie settings)
Children
2search is meant for adults. Under India's DPDP Act, anyone under 18 is a child. We don't knowingly collect personal data from children, we don't track children or show them personalised ads on purpose, and we don't ask children to contact us. If we ever needed a child's personal data, we would first get verifiable consent from a parent or lawful guardian, as the DPDP Act requires. If you're a parent or guardian and think your child has sent us data, email privacy@2search.in and we'll delete it.
How we protect data
- The whole site uses HTTPS encryption.
- We collect as little as possible — no accounts, no passwords, no payments.
- Access to our email and hosting accounts is limited and protected with strong sign-in.
- If a personal data breach happens, we'll tell affected people without delay, in plain words: what happened, what it could mean for them, what we're doing and what they can do. We'll inform the Data Protection Board of India without delay and send it a full report within 72 hours, and tell other authorities (such as an EU or UK regulator) where their law requires.
Language of this notice
This notice is in English. Under the DPDP Act you can ask for it in any language listed in the Eighth Schedule of the Constitution of India — email privacy@2search.in and we'll send it to you.
Changes to this policy
When we change this policy, we update the date at the top. If a change is significant — for example a new kind of data or a new purpose — we'll show a notice on the site and, where needed, ask for your consent again.
Version history
| Date | What changed |
|---|---|
| 14 November 2026 | Added when the DPDP Rules apply, log retention, your duties under the DPDP Act, breach details, and Google's ad technology providers. Grievance timelines updated to the IT Rules as amended on 20 February 2026 |
Contact
- Privacy questions and requests: privacy@2search.in
- Grievance officer: grievance@2search.in
- Everything else: contact@2search.in
Still have a question? Email contact@2search.in or see all ways to reach us.