Privacy Policy
Last updated: 29 October 2026
This Privacy Policy explains what information ICT Notes ("we", "us") collects when you use ictnotes.org (the "website"), why we collect it, and the choices you have. We aim to collect as little personal information as possible. Most of the website can be used without telling us who you are.
We handle personal data in line with Sri Lanka's Personal Data Protection Act, No. 9 of 2022 (as amended) and the principles it sets out: lawful and fair processing, collecting only what is needed, keeping it accurate and secure, and keeping it no longer than necessary.
Who we are
ICT Notes is a free online library of ICT past papers, model papers, term test papers and lessons for Sri Lankan students. We are an independent educational resource. We are not part of, or connected to, the Department of Examinations, the Ministry of Education or any provincial department of education.
For any privacy question or request, contact us at info@ictnotes.org or use the contact form.
Information we collect
When you browse and download papers
You do not need an account to read lessons or download papers. When you download a paper, we keep a simple download record so we can count how often papers are used and stop abuse. The record contains:
- the paper that was downloaded and the date and time;
- the country you were in, as reported by our network provider;
- a one-way coded value (a salted hash) made from your IP address, so we can spot repeated automated downloads.
We do not store your IP address itself in these records, and we do not link download records to your name or email address.
When you submit a paper
If you send us a paper through Submit a Paper, we collect the PDF and the paper details you enter (such as year, grade and school). Your name, email address and message are optional. We use them only to review the paper, to contact you about it if needed, and, if you ask, to credit you. Do not include other people's personal information in a submitted file.
When you contact us
If you use the contact form, we collect your name, email address, your phone or WhatsApp number if you choose to give it, the topic and your message. We use these details only to reply to you and to keep a record of the conversation. If you email, call or message us on WhatsApp, we receive the details your email or phone service shares with us.
Security checks
Our forms and downloads are protected by Cloudflare Turnstile, a privacy-focused check that confirms a real person is using the website. Cloudflare processes technical information about your browser and connection for this purpose. All traffic to the website passes through Cloudflare, which may also process your IP address to deliver the website securely and to block attacks.
Cookies and similar technologies
We use a small number of cookies and browser storage items:
Purpose | What it does | Can you turn it off? |
|---|---|---|
Essential | Remembers your cookie choice and your light or dark theme. Keeps editors signed in to the admin area. | No; the website needs these to work as expected. |
Analytics | Google Analytics helps us understand which papers and lessons are useful, using aggregated statistics. | Yes. Choose Reject in the cookie notice. |
Advertising | Google AdSense shows ads that help keep every paper free. Google may use cookies to show and measure ads. | Yes. Choose Reject to limit ad cookies; you may still see non-personalised ads. |
In some regions analytics and advertising cookies are off until you accept them. You can change your choice at any time by clearing this website's data in your browser; the cookie notice will then appear again. You can learn how Google uses information from websites that use its services at policies.google.com/technologies/partner-sites.
How we use information
We use information only to:
- run, secure and improve the website;
- count downloads and understand which resources students need;
- review and publish submitted papers;
- reply to messages and requests;
- prevent spam, scraping and abuse;
- meet legal obligations.
We do not use your information to make automated decisions that have legal or similarly significant effects on you.
Sharing your information
We do not sell, rent or trade personal information, and we do not share students' or visitors' personal information directly with third-party agencies for their own marketing.
We use trusted service providers to run the website. They process information on our behalf or under their own privacy terms, only as needed to provide their service:
- Cloudflare: website delivery, security, Turnstile checks and private storage of paper files;
- Google: Google Analytics and Google AdSense, as described above;
- our hosting provider, which runs the website servers and database;
- an email service, when we send replies or notifications.
We may also disclose information if Sri Lankan law, a court order or a lawful request from a public authority requires it, or where it is necessary to protect the rights, safety or security of our users or the website.
Where information is stored
Our service providers may store and process information on servers outside Sri Lanka. Where this happens, we rely on providers with recognised security and privacy practices.
How long we keep information
Information | How long we keep it |
|---|---|
Download records (coded, no names) | Up to 24 months, then deleted or kept only as anonymous totals |
Contact messages | Up to 24 months after the conversation ends |
Submitted papers and their details | While the paper is under review. Your name and email are kept with an approved paper's record for as long as the paper is published. Files that are not approved are deleted. |
Admin accounts | While the account is in use |
We may keep information longer only where the law requires it.
Children and students
Many of our visitors are school students. You can use the website without giving us any personal information. If you are under 18, please ask a parent or guardian before sending us a message or a paper. We do not knowingly collect more information from students than they choose to send us. If a parent or guardian believes a child has sent us personal information that should be removed, please contact us and we will delete it.
Your rights
Subject to the Personal Data Protection Act, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or incomplete;
- delete your information, or stop using it;
- withdraw your consent where we rely on it (for example, by choosing Reject for cookies).
To make a request, contact info@ictnotes.org. We may ask you to confirm your identity, and we aim to reply within 21 days. If you are not satisfied with our response, you may contact the Data Protection Authority of Sri Lanka.
Security
We protect information with encrypted connections (HTTPS), access controls on the admin area, private storage for paper files, verification checks against automated abuse, and by limiting who can see personal information. No online service can be completely secure. If a data breach is likely to affect you, we will tell you and, where required, the relevant authority, as soon as reasonably possible.
Links to other websites
Lessons and pages may link to other websites, such as official exam or university pages. We are not responsible for the privacy practices of those websites, so please read their own policies.
Changes to this policy
We may update this Privacy Policy when the website or the law changes. The date at the top shows the latest version. Significant changes will be highlighted on the website.
Contact
ICT Notes, Sri Lanka. Email: info@ictnotes.org. Phone and WhatsApp: 071 420 5321. You can also use our contact form.
Please also read our Terms and Conditions.