1. Home
  2. Docs
  3. Privacy policy

Policies

Privacy policy

What personal data 2search collects, why, who we share it with, how long we keep it, and how to use your rights under India's DPDP Act, the GDPR and US state laws.

Updated · 8 min read

On this page
  1. The short version
  2. Who we are and what this covers
  3. What we collect
  4. How we use it, and why we're allowed to
  5. Who we share it with
  6. How long we keep it
  7. Your rights
  8. Children
  9. How we protect data
  10. Language of this notice
  11. Changes to this policy
  12. Version history
  13. Contact

The short version

  • You don't need an account to read 2search, and we never ask for your name, phone number or payment details.
  • When you visit, our hosting provider records basic technical data (like your IP address and browser) to keep the site running and safe.
  • Analytics and personalised ads only run with your OK in India, the EU, the UK and Switzerland. Elsewhere you can turn them off any time in cookie settings.
  • We don't sell your personal data. We don't use it to decide anything important about you.
  • You can ask us to see, correct or delete your data, or withdraw consent, by writing to privacy@2search.in.

Who we are and what this covers

2search.in ("2search", "we", "us") is a website that publishes researched articles, guides and calculators. For the personal data described here, 2search is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025, and the controller under the EU and UK GDPR. The companies that host the site and send us email act as our Data Processors.

When the Indian rules apply: the DPDP Rules, 2025 were notified on 13 November 2025 and come into force in stages. Most duties — notices like this one, security safeguards, breach reporting and your rights — apply from 13 May 2027. We already follow them today.

This policy covers 2search.in, its search box, its public API and the emails you send us. It doesn't cover other websites we link to — they have their own policies.

Questions about your personal data privacy@2search.in — answered by our grievance officer
Grievance officer Grievance Officer, 2search — grievance@2search.in (details)

What we collect

What Examples When
Technical data IP address, browser and device type, pages requested, date and time, the page you came from Every visit (recorded by our hosting provider)
Cookie and device data Cookie IDs, approximate location (country/city from IP), pages read, how long you stayed, ad interactions Only for the cookie types you allow — see the cookie policy
Your settings Cookie choices, light/dark theme, search mode Saved in your own browser
Consent record A random ID, what you chose, the time and your country When you make a cookie choice
Messages you send Your email address, name (if you give it) and what you write When you email us
Search queries Words you type in the search box Search runs in your browser; queries to our public API may appear briefly in server logs
Calculator inputs Income, loan amounts, rates you type into our calculators Never sent to us — calculators run entirely in your browser and nothing is saved

We don't collect sensitive data such as health, financial account, government ID or religion details. Please don't send them to us. We don't knowingly collect data from children (see below).

How we use it, and why we're allowed to

Purpose Data used Legal basis
Run the site, show pages, keep it fast Technical data DPDP: legitimate use to provide the service you asked for. GDPR: legitimate interests
Keep the site secure, stop abuse and spam Technical data DPDP: legitimate use (security). GDPR: legitimate interests
Understand which articles help (Google Analytics) Cookie data Your consent (India, EU, UK, Switzerland); elsewhere you can opt out
Show ads that keep 2search free (Google AdSense) Cookie data, technical data Non-personalised ads: legitimate interests. Personalised ads: your consent where required, with an opt-out elsewhere
Remember your choices Your settings, consent record Needed to respect your choices (legal obligation)
Reply to you, fix errors you report Messages Your request (consent), legitimate interests
Meet legal duties Any of the above, as required Legal obligation

We don't use your data for automated decisions that have legal or similarly important effects on you.

Who we share it with

We only share data with service providers who help run 2search, and only what they need:

Provider What they do Where
Vercel Inc. Hosts the website and keeps short server logs USA and global edge network
Google LLC / Google Ireland Google Analytics (if you allow it) and Google AdSense ads USA and other countries
Our email provider Receives and stores emails you send us As per provider

Google AdSense: Third-party vendors, including Google, use cookies to show ads based on your earlier visits to 2search or to other websites. Google's advertising cookies let Google and its partners show you ads based on those visits. Google may also use your IP address to show and measure ads, including when cookies are off. For ads, Google acts as an independent controller of the data it collects. Learn how Google uses data from sites that use its services, or turn off personalised ads in Google's My Ad Center. You can also opt out of some vendors at aboutads.info and, in the EU, at youronlinechoices.eu. Other ad companies Google works with are listed in Google's ad technology providers.

We may disclose data if the law requires it, to protect people's safety, or as part of a sale or merger of the website (with this policy still applying). We don't sell personal data and we don't share it for cross-context behavioural advertising other than through Google's ad services described above, which you can turn off.

Data sent outside India and the EU

Our providers may process data in the USA and other countries. Where the GDPR applies, they rely on safeguards such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. Transfers from India follow the DPDP Act and any country restrictions the government notifies.

How long we keep it

Data How long
Server and security logs (technical data) Up to 1 year, then deleted. From 13 May 2027 India's DPDP Rules require at least 1 year, to detect and investigate security problems
Google Analytics data 14 months, then deleted automatically
Advertising cookies Up to 13 months (set by Google); see the cookie policy
Your cookie choice 12 months, then we ask again
Consent records At least 1 year after your choice, so we can show consent was given
Emails you send Up to 2 years after our last exchange, unless you ask us to delete them sooner

When data is no longer needed, we delete it or make it anonymous.

Your rights

You can use these rights for free. We may ask you to confirm your identity first (for example by replying from the same email address).

If you're in India (DPDP Act, 2023)

  • Access a summary of your personal data and how we use it, and who we've shared it with
  • Correct, complete or update your data
  • Erase your data when it's no longer needed or you withdraw consent
  • Withdraw consent at any time — as easily as you gave it, from cookie settings
  • Grievance redressal — we acknowledge within 24 hours and reply within 30 days at the latest, usually much sooner (the DPDP Rules allow up to 90 days)
  • Nominate someone to use your rights if you die or can't act yourself

If you're not satisfied with our answer, you can complain to the Data Protection Board of India, a fully digital body. You need to use our grievance process first. The Board's powers to hear complaints start on 13 May 2027.

Under the DPDP Act you also have a few duties: please don't pretend to be someone else when you make a request, don't hide important information, and don't file false or frivolous complaints.

If you're in the EU, UK or Switzerland (GDPR)

You have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent at any time. You can also complain to your local data protection authority. We reply within one month.

If you're in the USA (California and other states)

Depending on your state, you can ask to know what we collect, delete or correct it, and opt out of the sale or sharing of personal data and targeted advertising. We don't sell data for money, but some ad cookies may count as "sharing" — turn them off on your privacy choices. We honour the Global Privacy Control (GPC) browser signal. We won't treat you differently for using your rights, and you can use an authorised agent.

How to make a request

Email privacy@2search.in with:

  1. What you'd like us to do (see, correct, delete, or withdraw consent)
  2. Your country or state
  3. Anything that helps us find your data (for example the email address you wrote from, or your consent ID shown in cookie settings)

Children

2search is meant for adults. Under India's DPDP Act, anyone under 18 is a child. We don't knowingly collect personal data from children, we don't track children or show them personalised ads on purpose, and we don't ask children to contact us. If we ever needed a child's personal data, we would first get verifiable consent from a parent or lawful guardian, as the DPDP Act requires. If you're a parent or guardian and think your child has sent us data, email privacy@2search.in and we'll delete it.

How we protect data

  • The whole site uses HTTPS encryption.
  • We collect as little as possible — no accounts, no passwords, no payments.
  • Access to our email and hosting accounts is limited and protected with strong sign-in.
  • If a personal data breach happens, we'll tell affected people without delay, in plain words: what happened, what it could mean for them, what we're doing and what they can do. We'll inform the Data Protection Board of India without delay and send it a full report within 72 hours, and tell other authorities (such as an EU or UK regulator) where their law requires.

Language of this notice

This notice is in English. Under the DPDP Act you can ask for it in any language listed in the Eighth Schedule of the Constitution of India — email privacy@2search.in and we'll send it to you.

Changes to this policy

When we change this policy, we update the date at the top. If a change is significant — for example a new kind of data or a new purpose — we'll show a notice on the site and, where needed, ask for your consent again.

Version history

Date What changed
14 November 2026 Added when the DPDP Rules apply, log retention, your duties under the DPDP Act, breach details, and Google's ad technology providers. Grievance timelines updated to the IT Rules as amended on 20 February 2026

Contact

Still have a question? Email contact@2search.in or see all ways to reach us.