Privacy policy
This site has no accounts and no payments, so there is little to collect. Here is exactly what we do collect, why, how long we keep it, and what you can ask us to do with it.
The short version
- We never ask for your Lotus365 password, OTP, Aadhaar, PAN or card details, and we have no way to store them.
- When you tap a Lotus365 or WhatsApp button we log the time, the page and your IP address for 90 days, to see which pages help people.
- We use Google Analytics 4 to count visits. It does not store your IP address and we do not send it anything that identifies you.
- One small cookie remembers whether you chose English or Hindi. That is the only cookie we set ourselves.
- WhatsApp, Cloudflare and Google each process some data under their own policies. We name them below.
- You can ask what we hold about you, have it corrected or erased, or complain, by emailing [email protected].
1. Who we are
Arts Forums is an independent guide to Lotus365 published by Arts Forums Digital, New Delhi, India. We are the data fiduciary for the data described on this page under the Digital Personal Data Protection Act 2023. We are not Lotus365. Anything you do inside the Lotus365 panel or app is governed by the operator's own privacy terms, which we do not control.
Our contact for anything on this page is . The person responsible for answering is Berlin, our editor.
2. What we collect
There is no sign-up, no login and no payment on this site. The data we do collect is listed in full here.
| Data | When | Why | Kept for |
|---|---|---|---|
| Time, page, button type and IP address | When you tap a WhatsApp, login or APK button, which passes through our redirect at /go.php | To learn which pages actually help people, and to spot abuse of the redirect | 90 days, then deleted |
| Standard server log: IP address, time, page requested, browser type, referring page | Every page view, recorded by the web server | Security, debugging, blocking attacks | 30 days, then deleted |
| Anonymous visit statistics: pages viewed, country and state, device type, how you arrived | Every page view, via Google Analytics 4 | To see what people read and what they skip | 14 months in Google Analytics, aggregated |
| Your language choice | When you switch between English and Hindi | So the site opens in your language next time | 12 months, on your own device |
| Whatever you write to us, and your email address or WhatsApp number | When you email or message us | To answer you and to keep a record of corrections we made | As long as the conversation is open, then up to 12 months |
3. What we do not collect
- Your Lotus365 username or password. We never ask for a password, and our WhatsApp replies will never ask for one either. If someone does, it is not us.
- One-time passwords, bank details, UPI PINs, card numbers or UPI transaction screenshots beyond the reference number you choose to send us for a payment query.
- Aadhaar, PAN, voter ID or any government identity document.
- Your name, unless you give it to us in a message. You can use WhatsApp with only a first name.
- Precise location. Analytics shows us country and state, nothing finer.
5. Who else sees data
- Cloudflare, Inc. sits in front of our server to block attacks and serve pages faster. It sees every request, including your IP address, and processes it under its own privacy policy.
- Google LLC provides Google Analytics 4. It receives page view events with IP address anonymised at collection. We have not enabled Google Signals or advertising features.
- WhatsApp LLC (Meta). When you tap a WhatsApp button you leave this site. Your message, number and profile are handled by WhatsApp under its terms, and by the person who answers.
- The Lotus365 operator. When you follow the login or APK link you leave this site. From that point the operator is responsible for your data, and this policy no longer applies.
- Our hosting provider stores the server and its logs in India and gives us no access to anything beyond our own account.
We do not sell data, rent lists or share messages with anyone else. If a court or authority in India lawfully requires data, we will provide what the order covers and nothing more.
6. Why we may process it
Under the Digital Personal Data Protection Act 2023 we process data either with your consent or for a legitimate use. In plain words:
- Server logs and the redirect log keep the site secure and working. That is a legitimate use.
- Analytics runs only after you have seen the cookie notice on your first visit. Closing the notice or continuing to browse counts as agreeing to the visit count described above. You can withdraw by blocking the _ga cookies at any time.
- Replying to your message is processing you asked for when you wrote to us.
7. Your rights
You can ask us, by email, to:
- Tell you what personal data we hold about you and who it has been shared with.
- Correct anything that is wrong or incomplete.
- Erase it, unless we must keep it for a legal reason, in which case we will tell you which one.
- Withdraw consent for analytics, with no effect on anything else.
- Nominate someone to exercise these rights for you if you are unable to.
- Complain, first to us, and then to the Data Protection Board of India if you are not satisfied with our answer.
We answer within 30 days. Because we hold so little, most requests are answered with "we have nothing on you beyond a line in a log that expires in 90 days", and we will say so plainly.
8. Under-18s
This site is for adults. Online money gaming is for people aged 18 and over, and we do not knowingly collect data from anyone younger. If you believe a minor has written to us, email us and we will delete the conversation.
9. How we protect it
- Every page is served over HTTPS. The redirect log and server logs are stored outside the web root and rotated automatically.
- Only the editor has access to the server and the mailbox, with two-factor authentication on both.
- We keep as little as possible for as short a time as possible, which is the strongest protection there is.
10. Changes to this policy
When something changes we update this page and the date at the top, and we add a line below so you can see what moved. We do not reach back and quietly rewrite old versions.
| Date | Change |
|---|---|
| 4 Nov 2026 | First version published. |
11. Contact and grievances
Grievance officer: Berlin, editor, Arts Forums, New Delhi, India. Email with "Privacy" in the subject line. We confirm receipt within two working days and resolve within 30 days.
If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India under the Digital Personal Data Protection Act 2023.