Our transparent commitment to student data protection, Google AdSense disclosures, CCPA/GDPR compliance, and privacy safeguards.
Paper Vault operates as an open-access educational repository for Sri Lankan students and educators. We never require accounts or paywalls to access past papers, we never sell personal information, and we adhere strictly to Google AdSense Publisher Policies, GDPR, and CCPA standards.
We never monetize, rent, or trade student user data with external commercial brokers.
Local storage is strictly used for UI preferences like Dark Mode and exam filter selections.
Server diagnostic telemetry is automatically purged on a rolling 30-day security cycle.
When you access Paper Vault, we collect minimal data necessary to deliver fast, secure, and reliable educational documents:
We use cookies and HTML5 LocalStorage solely to improve your user experience and maintain your UI preferences across visits:
To keep Paper Vault 100% free for all students, we may partner with third-party advertising vendors, including Google, to serve non-intrusive contextual and educational advertisements.
Important Google Advertising & DART Cookie Notices:
Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have specific statutory rights concerning their personal information:
Zero Sale or Sharing of Personal Data: Paper Vault does not sell personal information, nor do we share personal information of any user (including students under 16 years of age) with third parties for cross-context behavioral advertising.
To exercise any California consumer rights, contact us directly at papervault.lk@gmail.com. Requests are confirmed and addressed within 45 days as required by law.
For users located in the European Economic Area (EEA) and the United Kingdom, Paper Vault complies fully with the General Data Protection Regulation (GDPR) and UK GDPR:
Data Controller: Paper Vault Educational Initiative, Colombo, Western Province, Sri Lanka. Contact: papervault.lk@gmail.com.
Legal Bases for Processing: We process data under Article 6 of the GDPR based on: (1) Legitimate Interests to ensure system security, anti-abuse, and high-availability delivery of educational papers; and (2) Consent when you voluntarily submit inquiry forms or agree to non-essential cookies.
Your Statutory Rights: You have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict processing of (Art. 18), obtain data portability for (Art. 20), and object to processing of (Art. 21) your personal data. You also maintain the right to lodge a complaint with your national Data Protection Authority (DPA).
Protecting younger students is paramount. Paper Vault does not knowingly collect or solicit personal information from children under the age of 13. All public study resources are accessible without registration. If we discover that personal information has been provided by a child under 13 without verified parental consent, we promptly purge that information from our records.
All communications between your device and Paper Vault are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS). Our static infrastructure is served via Cloudflare global edge networks with automated threat mitigation.
Diagnostic server logs are retained for a maximum of 30 days on a rolling cycle before permanent deletion. Messages submitted via our Contact Form are retained only as long as needed to resolve your query and are purged upon request.
We may periodically revise this Privacy Policy to maintain compliance with updated privacy legislation, Google AdSense policies, or technical infrastructure enhancements. Any changes will be posted here with an updated effective date.
Operating Entity: Paper Vault Educational Initiative
Geographic Location: Colombo 03, Western Province, Sri Lanka
Official Privacy Email: papervault.lk@gmail.com
Our data protection team is available to assist with any privacy inquiries.
