Privacy Policy
1. Information We Collect
CampusNotes collects only the minimal information required to provide academic resource sharing:
- Account Data: Display name, email address, and securely hashed passwords (using bcrypt). We never store plaintext passwords.
- Resource Metadata: Titles, academic categories, subjects, courses, semester levels, and file details.
- Security Logs: IP addresses and timestamps for authentication rate limiting and administrative audit tracking.
2. How Anonymous Uploads Protect You
When you select Upload anonymously, your public resource listing will only show Anonymous contributor. Your display name, email, and user account link are stripped from the public HTML, API responses, search queries, and download metadata.
3. Data Sharing and Third Parties
CampusNotes does not sell, rent, or monetize personal user data. We do not use third-party ad trackers, tracking cookies, or commercial profiling.
4. Session and Cookie Policy
We use strictly necessary PHP session cookies configured with HttpOnly, SameSite=Strict, and secure session rotation to protect your authenticated account from hijacking.
5. Current Limitations
Email verification and automated password recovery flows are not yet implemented in the initial MVP release. Users are encouraged to maintain strong, unique passwords.