Privacy
There is no account, no login and no form on this site that asks you for anything. There is also a session recorder running on every page, and you should know that before you read anything else here.
The short version
We ask you for nothing and keep no database of visitors. Three analytics tools run on every page, one of which records your session as a replayable video of your pointer and taps. Our host sees every request, as any host does. Everything published about companies here comes from government records, never from you.
What runs on every page
Three third-party tags, loaded in the page head. They run on the static pages and on the company pages alike, because both are served from the same head. They do not run on a local development build.
Umami
loads from analytics.apexlayer.in
Self-hosted page analytics, run by us on our own server. It records the page URL, the referring link, your screen size, browser and operating system, and a country derived from your IP address. It sets no cookies, and by design it stores a rotating daily hash rather than your IP address, so it cannot follow you from one day to the next.
Google Analytics 4
loads from www.googletagmanager.com
Page and event analytics run by Google. Two properties exist, one per domain, and the page picks the right one from the hostname at load time. It sets cookies in your browser and Google receives your IP address with the request. Google states that it does not store that IP for Analytics and uses it only for an approximate location. That is Google saying so, not us: we cannot see inside it.
Microsoft Clarity
loads from www.clarity.ms
A session recorder. It captures pointer movement, taps, clicks, scrolling and rage clicks, and reconstructs them as a replayable recording of your visit, plus aggregate heatmaps. It sets cookies. This is the most invasive thing on the page and it deserves its own section, below.
Google and Microsoft are United States companies, so using this site sends request data to servers outside India. If that matters to you, block www.googletagmanager.com and www.clarity.ms in your browser: every page here works exactly as it does now without them.
Clarity records your session
Being blunt about this, because "we use Clarity for analytics" hides it. Clarity reconstructs your visit: where the pointer went, what you tapped, how far you scrolled, where you hesitated, and the page as it was rendered to you. Someone can sit down later and watch that back. That is the point of the tool, and it is why it is on this page: across 4,53,192 records, watching where people give up is how the navigation gets fixed.
We have never changed its masking configuration, so it runs at Microsoft's default, which masks the text you type into form fields. The only field on this site is the search box. We do not tag recordings with any identity of our own, because we do not have one to tag them with, and we do not attempt to work out who a recording belongs to.
Cookies
We set none of our own. This site stores nothing in your browser: no cookie, no local storage, no preference, no identifier. The cookies you will find here belong to Google Analytics and to Clarity, and they exist to tell those tools that two page views came from the same browser. Clearing them resets that, and blocking them costs you nothing on this site.
There is no consent banner
A deliberate choice, and an arguable one. Consent banners on sites like this are usually a dark pattern dressed as a right: a wall between you and a public record, with a pre-ticked box behind it. We would rather write this page, tell you the three hosts by name, and leave the control where it actually works, which is your browser.
So: browser tracking protection, a content blocker, or private browsing all stop these tags outright, and none of them breaks a single page here. Nothing on this site is gated behind analytics working. We do not currently act on Do Not Track or Global Privacy Control headers, which is worth saying plainly rather than leaving you to assume we do.
What our host sees
The site is served by Cloudflare. Like any host, it handles every request and therefore sees your IP address, the URL, your browser string and the time, and it uses them to deliver, cache and protect the site from abuse. That processing is Cloudflare's, under their terms as our provider. We do not export those logs, join them to anything, or build a profile from them.
The search box
What you type into search is sent to our own endpoint so it can look up matching company names, and the answer is cached at the edge for an hour. We do not write your query to any database and we keep no search history. If you arrive from a link that already carries a query in the URL, that URL is a page address like any other, so it reaches the analytics tools above.
The records are not about you
Everything published about a company here comes from Indian government open data and other public sources, never from visitors. Every source is listed. We deliberately withhold two things the sources give us: director names, and registered office address lines, which in company-registry data are frequently a founder's home. The methodology explains both, and a build gate greps the whole site output for address and director fields and fails the build on a single hit.
If you are connected to a company record and want something changed or taken down, write and say which record. We would rather fix it than argue about it.
Contact, and changes
trust@indianstartupmap.com reaches a monitored inbox at Apexlayer Technologies. If the list of tools on this page ever changes, this page changes with it in the same release. If you find a tag running here that is not named above, that is a bug and we want to hear about it.
Related: terms of use, the data licence, and the questions people ask.