Your Next.js App Is Probably Breaking Indian Law

India's Digital Personal Data Protection Act (DPDP), 2023 is now in effect. If your app serves Indian users and does any of the following, you're non-compliant:

Loads Google Analytics / Facebook Pixel / Hotjar before the user consents

Stores Aadhaar numbers, PAN, phone numbers in localStorage without encryption

Sets document.cookie without a consent check