Privacy policy

Who this covers

This policy covers the CountryStateCity website at countrystatecity.in, built and maintained by Darshan Gada. The API console, Export Tool and Update Tool are separate services where you create an account. Account details, and billing details on paid plans, are collected there rather than on this website.

What we collect

The marketing pages have no account sign-up form, comments or newsletter. The optional docs assistant accepts questions and can offer a contact form; include only information you want to send to that service.

Like any website, our hosting and Cloudflare, which sits in front of it, see your IP address, browser type and the pages you request. They use this to deliver the site and keep it secure.

If you email us, we receive your email address and whatever you write. If you contribute to the database on GitHub, your username and contribution are public in the repository history.

If you accept optional analytics, Google Analytics receives page and interaction data and can derive approximate location from your connection. Mintlify also records usage of its docs assistant.

Cookies and browser storage

The site’s cookies and browser storage are listed below. Preference settings and campaign attribution have different purposes; campaign attribution is used to understand how visitors reach the app. After opt-in, the docs assistant also uses temporary analytics identifiers in memory.

• csc-cookie-consentBrowser storage · Until you clear itRemembers whether you accepted or declined optional analytics.
• csc-promo-hiddenBrowser storage · Until you clear itRemembers that you closed the announcement bar.
• csc-billingBrowser storage · Until you clear itRemembers the monthly or annual choice on the pricing page.
• csc_attributionSession storage · For the tab session; browsers may restore sessionsKeeps the source, campaign and package from a link you arrived with (for example from npm), so buttons that open the app can pass it along. This campaign attribution is stored even if you decline optional analytics.
• _ga, _ga_…Cookies (Google Analytics) · Default expiry: two years, refreshed on analytics visitsTell Google Analytics which visits belong together. Set only after you accept and removed if you decline.

Services your browser contacts

The services below receive your IP address when contacted. Some depend on the page you view or your analytics choice. The marketing site’s fonts are served from our own domain.

• Google AnalyticsLoaded only after you accept optional analytics. Receives your IP address, page URLs and referrers, device and browser information, and tracked interactions. Google advertising consent stays denied.
• Mintlify and PostHogThe “Ask the docs” assistant loads only after you accept optional analytics. Mintlify’s widget uses PostHog for usage events and temporary identifiers held in memory. Questions and any contact details you submit through the assistant are sent to Mintlify.
• GitHubPages showing live star counts or recent database changes request them from api.github.com, which receives your IP address.
• Our own APIsPages showing live statistics or pricing call api.countrystatecity.in or eapi.countrystatecity.in. These requests disclose your IP address even if you decline optional analytics.

The separate API and dashboard

The API account system stores your name and email address, GitHub username and avatar when you sign in with GitHub, API keys and allowed hosts or IP addresses, communication preferences, and plan and payment references. It also keeps account and conversion milestones, billing events, email delivery attempts and internal support notes. When supplied during registration, source, campaign and package attribution is saved on the account.

The API records operational usage totals and statistics about routes, response status, response time, source country and referring host. These records support usage limits, billing and service monitoring, independently of this website’s analytics choice. Deactivating an account disables access; it does not delete the account record or its usage history.

The API uses Dodo Payments for paid plans, GitHub for GitHub sign-in, and a configured SMTP email service for authentication and notifications. Sentry can receive diagnostic and performance data when configured; Slack can receive operational alerts and summaries when configured. Our server and Cloudflare receive network request information. The dashboard stores sign-in state in your browser.

How we use it

We use it to run and secure the site, to see which pages help developers (only if you accept cookies), and to answer your emails. We do not sell personal data and there is no advertising on this site.

Who we share it with

The browser services above and our hosting and email providers process data to deliver the site or answer your request. The API also integrates the services described below. Several providers operate in other countries, so your data can be processed outside the one you live in. Links to other sites, such as GitHub, npm, PyPI and Kaggle, are governed by those sites’ own policies.

How long we keep it

Emails are kept as long as needed to answer you and keep a record of the request. Analytics data is kept for the period set in our Google Analytics account. Hosting and Cloudflare logs follow those providers’ retention schedules. The items in your browser stay until you clear them or, for session storage, until you close the tab.

Your choices and rights

Google Analytics and the docs assistant are off until you accept optional analytics. You can change your choice at any time with Cookie settings in the footer; declining removes the Google Analytics cookies and reloads a page that had analytics running to stop it. You can also clear this site’s storage in your browser settings. The choice on this website does not control account storage or operational usage records in the separate API and dashboard.

Depending on where you live, you may have the right to ask what we hold about you, and to have it corrected or deleted, or to object to how it is used. Email [email protected] and we will respond. You can also complain to your local data protection authority.

Children

This website is written for developers and is not aimed at children.

Changes to this policy

When we change this policy we update the date at the top. The current version is always on this page. Last updated October 13, 2026.