Privacy policy
What this website collects, why, and what happens to it. In short: as little as possible, only to run the festival’s services, and never sold.

Draft policy text for review by the Department’s legal cell before publication. It follows the Information Technology Act 2000, the Digital Personal Data Protection Act 2023 and the Guidelines for Indian Government Websites.
What we collect
This website is published by the Mysuru Dasara Committee under the Department of Tourism, Government of Karnataka. Browsing it does not require an account and collects no personal information. Information is collected only when you give it:
- Ticket bookings — name, mobile number, email, and the ID details required at the gate. Payment details are handled by the payment gateway and are never stored on this site.
- Newsletter — your email address.
- Feedback and enquiries — name, email and the message you send.
- The Gajju assistant — the questions you type are processed to answer them and are not linked to you.
- Server logs — IP address, browser type, pages requested and time, retained for 90 days for security and capacity planning.
How it is used
To issue and verify tickets, to send the updates you asked for, to reply to you, to keep the site secure and to understand which pages are used so they can be improved. Data is not sold, rented or used for advertising. Aggregate statistics — visitor counts, popular pages — may be published.
Third-party services
- Maps — map tiles are loaded from Esri and OpenStreetMap; opening a map sends your IP address to those services. Directions links open Google Maps.
- Video — live streams and videos are embedded from YouTube in privacy-enhanced mode, which sets no cookies until you play.
- Fonts — typefaces are loaded from Google Fonts.
- Payments — the ticket gateway’s own privacy policy applies to payment.
Your rights
Under the Digital Personal Data Protection Act 2023 you may ask what personal data we hold about you, have it corrected or erased, and withdraw consent for the newsletter at any time — every email carries an unsubscribe link. Requests are answered within 30 days.
Contact
Data Protection Officer, Dasara Secretariat, Office of the Deputy Commissioner, Mysuru 570 005 — or through the contact form, selecting “Something else”.
