Privacy Policy

BRAKMASRA ("we", "us", "our") is the official store of the BRAKMASRA channel, operated from Sri Lanka. This policy covers the website at brakmasra.com, including member accounts, the contact form, and drop alerts.

• Account details: your name, email address, and password when you create an account, and a mobile number if you choose to add one. Passwords are stored in hashed form by our authentication provider; we never see them in plain text.
• Google sign-in: if you choose Continue with Google, we receive your name, email address, and profile picture from your Google account.
• Contact messages: the name, email address, topic, and message you send through the contact form.
• Drop alerts: your email address and the time you agreed to receive them.
• Technical data: your IP address and basic browser information, processed when you use the site to keep it secure and working.

Ordering is not open yet, so we do not collect payment card details or delivery addresses. This policy will be updated before that changes.

• To create and run your account and keep you signed in.
• To contact you about your orders and deliveries, using the mobile number you gave us.
• To reply to messages you send us.
• To send the drop alerts you asked for.
• To protect the site against spam, abuse, and repeated sign-in attempts.
• To understand overall site performance through privacy-friendly, anonymous statistics.

We do not sell your personal information, and we do not use it for advertising.

When you sign in with Google, we request only your basic profile (name and profile picture) and your email address. We use this information solely to create your BRAKMASRA account and sign you in. We do not request access to your Gmail, contacts, files, or any other Google data.

BRAKMASRA's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this information to others except the service providers listed below that run the site, and we never use it for advertising.

We use a small number of trusted providers to run the site. They process data on our behalf, under their own security and privacy commitments:

• Supabase: database and account sign-in.
• Vercel: website hosting, plus anonymous traffic and performance statistics that do not use cookies.
• Google: optional sign-in with your Google account.

These providers may process data on servers outside Sri Lanka.

• Sign-in cookies: keep you signed in to your account. The site cannot offer accounts without them.
• Language cookie: remembers whether you chose English or Sinhala.
• Local storage: keeps the items in your cart on your own device.

We do not use advertising or cross-site tracking cookies.

• Account details: for as long as your account exists.
• Contact messages: only as long as needed to handle your request.
• Drop alert emails: until you ask us to stop.
• Security records containing your IP address: deleted automatically, usually within a day after they expire.

You can ask us to access, correct, or delete your personal information, to delete your account, or to stop sending drop alerts. We aim to handle your data in line with applicable law, including Sri Lanka's Personal Data Protection Act, No. 9 of 2022.

To make a request, email support@brakmasra.com or use the contact page. We may ask you to confirm your identity before acting on it.

The site is served over HTTPS, access to stored data is restricted, and forms are protected against automated abuse. No online service can be perfectly secure, so please use a strong password that you do not use anywhere else.

This site is not directed at children under 13, and we do not knowingly collect their personal information. If you are under 18, please ask a parent or guardian before creating an account.

We will update this page when our practices change, for example before ordering opens. The date at the top shows when it last changed.

For questions about this policy or your data, email support@brakmasra.com or send a message through the contact page.