Legal
Privacy Policy
This platform has been reviewed by the Pro Vice Chancellor and the Director, CRT at KL University. Attendance data is sourced directly from the Department of CRT. The platform operates with the knowledge of university management.
Overview
This Privacy Policy describes how the CRT Attendance Tracker ("the platform", "we") collects, stores, and protects information belonging to students and staff of the Y-23 Summer CRT Training at KL University.
Attendance records displayed on this platform are sourced from the Department of CRT and reflect data maintained by the CRT administration. By accessing this platform, you acknowledge that you have read and understood this policy.
Data We Collect
We collect only the minimum data required to operate the attendance tracking service.
| Data | Purpose |
|---|---|
| Registration number | Serves as the unique account identifier (username) |
| Full name | Displayed on the student dashboard and in system-generated emails |
| Password hash | Enables secure authentication; the plain-text password is never stored |
| Attendance records | Core purpose of the platform — slots marked Present, Absent, or SP per session; sourced from the Department of CRT |
| Section and batch | Groups students correctly within the attendance system |
Data We Do Not Collect
The following categories of data are not collected at any point:
- Phone numbers or personal contact details
- Aadhaar, PAN, or government ID numbers
- Device identifiers or hardware fingerprints
- Geographic or IP address data
- Browser history or behavioural analytics
- Payment or financial information
- Social media profiles or external account data
- Third-party tracking or advertising data
Security Measures
Password Storage
All passwords are hashed using bcrypt with a unique salt per account before being written to the database. The plain-text password is never stored, logged, or transmitted.
Session Management
Authentication is handled via signed JWT tokens stored in HttpOnly, Secure cookies. HttpOnly cookies are inaccessible to client-side JavaScript, protecting against cross-site scripting (XSS) attacks.
Password Reset Tokens
Reset tokens are cryptographically random, expire after 2 minutes, and are invalidated immediately upon use.
Data at Rest and in Transit
All data is stored on MongoDB Atlas, which encrypts data at rest and enforces TLS encryption for all connections. No data is stored on personal or local devices.
No Third-Party Tracking
No analytics, advertising, or tracking SDKs are embedded in this platform. There are no cookies beyond the authentication token.
Access Control
Access to data is strictly role-based. Each role can only access data necessary for their function.
May view only their own attendance records, session history, and dashboard statistics. No other student's data is accessible.
May upload attendance data sourced from the Department of CRT, manage student accounts, and view all records. Cannot access password hashes through the interface.
Email Communications
The only automated email this platform sends is a password reset link, delivered to the student's official KL University email address.
We do not send marketing, promotional, or unsolicited emails of any kind.
Data Retention
Student and attendance data is retained for the duration of the Y-23 Summer CRT Training programme. Password reset tokens are automatically invalidated within 2 minutes of generation.
Requests for data deletion can be submitted to 2300033181@kluniversity.in.
Your Rights
As a user of this platform, you have the right to:
- Change your account password at any time from the student dashboard.
- Know what data is associated with your account — your dashboard reflects all stored records.
- Request deletion of your account and associated data by writing to 2300033181@kluniversity.in.
Contact
For any questions, data requests, or concerns regarding this privacy policy, reach out at:
A student-built attendance tracking platform for the Y-23 Summer CRT Training at KL University.
Made by Akhil Panvi Chakkapalli · Y-23, KL University · with personal interest and easy tracking.