reach out
संवादः (saṁvādaḥ) · correspondence
सम्भाषणम् conversation
I welcome correspondence. Should you wish to share your perspectives on the site, the questionnaire, or matters related to indology, my contact information is below. If you work on digital projects in humanities, indology (esp. Dravidian or Sanskrit literature), or encryption—or if you'd like to collaborate—I am available to chat.
Feedback & Suggestions: If you have thoughts about the questionnaire, the site's functionality, or ideas for improvement, I would be grateful to hear them.
Technical Issues: Should you encounter difficulties with the site, authentication, or questionnaire responses, please describe the issue in detail so I might address it.
Support: This site operates independently without advertising or data harvesting. If you wish to support its ongoing development, you may consider patronizing Flokinet, the privacy-focused hosting provider.
गोप्यता privacy & transparency
This site is built on principles of respect, privacy, and openness. Below is a complete and honest accounting of our privacy practices, data handling, hosting infrastructure, and the legal frameworks that govern your data.
This site is hosted in Finland, not Iceland. While our hosting provider Flokinet is an Icelandic company with servers in Iceland, Romania, and the Netherlands, this particular site runs on infrastructure located in Finland. We believe in complete honesty about where your data physically resides.
Finland offers strong—though different—privacy protections than Iceland. Below we provide a detailed comparison so you can make an informed decision about using this service.
🌍 Jurisdiction Comparison: Finland vs Iceland
Both Finland and Iceland are often cited as privacy-friendly jurisdictions, but they differ in meaningful ways. This comparison aims to give you the nuanced picture, not marketing copy.
| Aspect | Finland 🇫🇮 | Iceland 🇮🇸 |
|---|---|---|
| EU Membership | EU Member State — subject to EU directives and regulations | Non-EU (EEA Member) — implements GDPR but outside direct EU institutional control |
| Data Protection Law | GDPR + Finnish Data Protection Act (1050/2018) — comprehensive, well-enforced by the Data Protection Ombudsman | GDPR-equivalent via EEA + Act on Data Protection and the Processing of Personal Data (90/2018) |
| Intelligence Sharing | Nine Eyes adjacent — Finland cooperates with Western intelligence but is not a formal Five/Nine/Fourteen Eyes member. Finnish Security Intelligence Service (Supo) has information-sharing agreements. | Not a member of any intelligence-sharing alliance. Iceland has historically resisted pressure to join surveillance frameworks. |
| Data Retention Laws | Mandatory retention exists — Finnish law requires ISPs to retain certain metadata (though not content) for law enforcement purposes. The Act on Electronic Communications Services mandates 12-month retention of connection data. | No blanket retention — Iceland struck down data retention laws following EU Court of Justice rulings. Providers are not obligated to retain traffic data. |
| Government Access | Judicial oversight required — Finnish authorities need court orders for data access. The process is transparent but functional for law enforcement. | Strong judicial barriers — Icelandic courts have historically been protective of privacy rights. The small judiciary and strong constitutional protections create friction for state access. |
| Press Freedom | #5 globally (RSF 2024) — excellent source protection, strong constitutional guarantees | #3 globally (RSF 2024) — pioneering journalist protection laws, "safe haven" reputation |
| Cross-Border Requests | MLAT compliant — Finland honors Mutual Legal Assistance Treaty requests from many countries including the United States. EU law enforcement cooperation is robust. | MLAT exists but slower — Iceland responds to valid requests but is known for deliberate, careful processing. Non-EU status adds procedural friction. |
| Constitutional Protection | Section 10 of the Finnish Constitution guarantees privacy of correspondence and communications. | Article 71 of the Icelandic Constitution guarantees privacy of correspondence, with proposed amendments to strengthen digital privacy. |
⚖️ What This Means For You
Practically speaking: Finnish hosting means your data could theoretically be subject to Finnish law enforcement requests with proper judicial process. Finland is a well-functioning democracy with strong rule of law—authorities cannot simply demand data without court oversight. However, Finland's intelligence cooperation and EU membership mean there are more pathways for international law enforcement access than in Iceland.
Our mitigation: We minimize what we collect and encrypt what we must store. If served with a valid Finnish court order, we could only provide encrypted data and metadata we don't retain (we've disabled access logging). We cannot provide what we don't have.
Why Finland then? Cost, latency, and infrastructure quality. Flokinet's Finnish servers offer excellent connectivity to both European and Asian users at a price point that keeps this project sustainable. We believe transparency about jurisdiction trade-offs serves you better than marketing a privacy jurisdiction we don't actually use. Note: the encrypted database storing questionnaire answers is hosted in Iceland, and the website itself is being migrated to Icelandic infrastructure in the near term.
🔓 Open Source & Auditability
This entire website is open source. Every line of code, every configuration file, and every database schema is available for public inspection. You are welcome—indeed, encouraged—to examine how your data is handled.
Repository: github.com/nyagrodha/aformulationoftruth
🔐 Data Collection & Encryption
What we collect:
- Email addresses (Newsletter): Encrypted using AES-256-GCM with PBKDF2 key derivation (100,000 iterations) before storage.
- Questionnaire responses: Encrypted with age (X25519) before storage. We cannot read your answers.
- Authentication: Magic links via email. We do not store passwords.
- IP addresses: Logged only for newsletter signup rate-limiting (anti-spam). Not linked to questionnaire responses. Not retained long-term.
🚫 What We Don't Do
- ❌ No tracking cookies or analytics (no Google Analytics, no Facebook Pixel)
- ❌ No advertising yet—but it's a 🍝bility. A girl's gotta eat! See contact to inquire. Kindly use PGP as default.
- ❌ No third-party data sharing
- ❌ No selling or monetizing user data
- ❌ No behavioral profiling or surveillance
- ❌ No access logging (we've disabled web server access logs)
🌐 Infrastructure Details
Hosted by Flokinet, an Icelandic company committed to privacy. Our specific server is in Finland.
- Server location: Finland (Flokinet infrastructure)
- Database: Encrypted PostgreSQL hosted in Iceland (Flokinet infrastructure)
- TLS: All traffic encrypted via Let's Encrypt certificates (TLS 1.3)
- Access logs: Disabled at the web server level
📜 Your Rights
Under GDPR (applicable in Finland) and general principle:
- Right to access: Request a copy of your data at any time
- Right to deletion: Request complete removal of your account and all associated data
- Right to portability: Export your questionnaire responses
- Newsletter unsubscribe: Instant removal via the unsubscribe link (no questions asked)
To exercise these rights, email us.
📧 Correspondence Privacy
Communications sent to this address are treated with the same respect for privacy that governs all interactions on this site. Your correspondence will not be shared, sold, or used for purposes other than responding to your inquiry.
I endeavor to respond to all correspondence within a reasonable timeframe, though as this is a personal project maintained alongside other commitments, I ask for patience. Thoughtful messages receive thoughtful replies.