Privacy Policy

VTU-Easy is a free educational platform built for VTU engineering students. We are committed to protecting your privacy. This policy covers what data we collect (and what we do not), how third-party services like Google AdSense and Google Analytics operate on our site, and your rights as a user.

• Your name, email address, or phone number
• Account credentials — there is no login or account system
• Payment or financial information
• Location data beyond country-level (via analytics)

• theme — your dark/light mode preference (via localStorage)
• bgImage — custom background image if you set one (via localStorage)

This data never leaves your device and is never transmitted to our servers.

VTU-Easy uses Google AdSense to display advertisements. This is how we fund free access to all resources on the platform. We do not receive or store any personal data from advertising — Google manages this entirely.

• Your IP address (anonymised)
• Browser type, device type, and operating system
• Pages visited and time spent (for ad frequency capping)
• Ad interaction data (clicks, impressions)
• Interest categories inferred from browsing behaviour

Google's advertising practices are governed by the Google Privacy Policy. You can manage or opt out of personalised ads at Google Ads Settings.

We use Google Analytics to understand how students use VTU-Easy — which subjects are most viewed, how users navigate between schemes and branches, and where performance can be improved.

• Number of visitors and page views (aggregate, not individual)
• Country and city-level location (approximate)
• Device type — mobile, tablet, desktop
• Pages visited and navigation flow
• Session duration and bounce rate

Cookies are small text files stored on your device. VTU-Easy uses cookies for two purposes: functional (our own) and advertising/analytics (third-party via Google).

• Functional: theme preference and background image stored via localStorage — no server involved
• Advertising: Google AdSense cookies for relevant ad serving (see Section 3)
• Analytics: Google Analytics cookies for anonymised usage tracking (see Section 4)

For full details see our Cookies & Cache Policy. You can manage cookies through your browser settings at any time.

When you contact us through external platforms — WhatsApp, Google Forms, YouTube comments, Instagram, LinkedIn, or GitHub — the data you share is handled by those platforms under their own privacy policies. We do not store messages or personal details from these platforms on our systems.

VTU-Easy is intended for use by engineering college students, who are typically 17 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through our platform, please contact us immediately at vtu.easy@gmail.com.

Depending on your location, you may have the following rights regarding your data:

Since we do not collect personal data directly, most requests relate to Google's data. Exercise these rights via Google My Account or your browser cookie settings.

By accessing and using vtu-easy.com, you consent to this Privacy Policy and agree to the use of cookies and third-party services as described. This includes Google AdSense interest-based advertising and Google Analytics anonymised tracking.

If you do not agree to this policy, please discontinue use of the website.

We may update this Privacy Policy from time to time. Changes are effective immediately upon posting. The "Last updated" date at the top reflects the most recent revision. We encourage you to review this policy periodically. Continued use of the platform after changes constitutes acceptance.

For any questions, concerns, or requests related to this Privacy Policy, please reach out:

• vtu.easy@gmail.com
• 6361003408

VTU Easy relies on a small number of trusted third-party services to deliver fonts, icons, and other static assets. Understanding how each of these services works helps you make informed choices about your browsing preferences.

VTU Easy loads the Sora, Space Mono, and Outfit typefaces directly from Google's font delivery network. When your browser requests a font file, it connects to Google's servers at fonts.googleapis.com (to fetch the CSS declaration) and fonts.gstatic.com (to download the actual font file). During this connection, your browser's IP address is visible to Google's servers — this is standard behaviour for any CDN request and is no different from visiting any other Google-hosted resource. Google does not receive your name, email, or any account information through this request. No cookies are set by Google Fonts. Google's servers process the IP address to route the font file efficiently and may log it for abuse prevention and analytics under Google's own privacy policy. If you are concerned about this, browser extensions such as uBlock Origin can block Google Fonts requests entirely — the VTU Easy website will display in your browser's default sans-serif font, but all content remains fully readable and accessible.

Icons on VTU Easy — the small visual symbols next to menu items, section headings, and buttons — are loaded from the Font Awesome icon library hosted via Cloudflare's CDNJS network (cdnjs.cloudflare.com). This request downloads a CSS stylesheet and font files containing icon vectors. As with Google Fonts, your browser's IP address is visible to Cloudflare's servers during the request. No personal data beyond the IP address is transmitted, no cookies are set by this CDN, and no user tracking is performed via this request. Font Awesome's code is MIT licenced and the icons are licenced under Creative Commons Attribution 4.0 — both are open and transparent licences.

Cloudflare may be involved in delivering VTU Easy's web pages as part of standard hosting infrastructure. Cloudflare acts as a reverse proxy and CDN, meaning your requests may pass through Cloudflare's network before reaching the origin server. Cloudflare processes IP addresses to provide DDoS protection, performance optimisation, and security filtering. Their data practices are governed by the Cloudflare Privacy Policy.

We selected Google Fonts, Font Awesome via CDNJS, and Cloudflare because they are industry-standard, trusted by billions of websites worldwide, have strong privacy and security practices, and deliver reliable, fast performance for students across India. These services are regularly audited and compliant with international data protection standards. Students who wish to use VTU Easy with maximum privacy can block CDN requests using browser extensions — the site will remain fully functional for all educational content, with icons and custom fonts replaced by system defaults.

VTU Easy is designed as a zero-data-collection platform for its own servers. We do not maintain any user databases, server-side session logs, or records of individual browsing activity. Here is a comprehensive breakdown of how different categories of data are retained:

Data collected through Google Analytics is retained according to Google's default settings, which is 14 months for user-level and event-level data. You can configure and shorten this retention period by visiting your Google Account settings at myaccount.google.com under Data & Privacy. After the retention period, individual-level data is deleted, though aggregate statistics may be preserved. We review this data purely at an aggregate level — page view counts, popular sections, device types — and never at the level of individual users.

VTU Easy stores your selected theme (dark or light mode) in your browser's localStorage under the key theme. This data is stored exclusively on your own device and is never transmitted to our servers under any circumstances. It persists until you clear your browser's site data or localStorage. If you use a private/incognito browsing window, this preference will not persist between sessions — it is deleted automatically when you close the window.

Google AdSense sets advertising cookies with varying retention periods. The __gads and IDE cookies, which are used for ad frequency capping and conversion tracking, are retained for up to 13 months. The NID cookie for ad personalisation is retained for approximately 6 months. You can delete these cookies at any time through your browser's cookie management interface or through Google's My Ad Center.

VTU Easy has no sign-up forms, login pages, surveys, or any other input mechanism through which you would submit personal information. Because no such forms exist on the platform, there is no personal data submitted to our servers to retain or delete. When you delete your browser data — cookies, localStorage, and cached files — all traces of VTU Easy's locally stored preferences are also removed from your device entirely.

Protecting the VTU Easy platform and maintaining a safe browsing environment for students is a priority. Here is a detailed overview of the security measures in place:

All pages on vtu-easy.com are served exclusively over HTTPS using Transport Layer Security (TLS 1.2 or higher). This means all data transmitted between your browser and VTU Easy's servers is encrypted in transit. You should see the padlock icon in your browser's address bar when visiting the site. HTTP connections are automatically redirected to HTTPS to ensure you are always on an encrypted connection.

VTU Easy cannot suffer a data breach involving user passwords or personal accounts because we do not store any of these. There is no user database on our platform. This architecture is intentional — by not collecting personal data in the first place, we eliminate the most common category of security risk that affects user-facing platforms.

Google's infrastructure, which powers both Google AdSense and Google Analytics on VTU Easy, is ISO/IEC 27001 certified and regularly audited by independent third parties. Google employs dedicated security teams, performs continuous vulnerability scanning, and maintains comprehensive incident response procedures. This means the third-party data processing that does occur on VTU Easy benefits from world-class security practices.

We implement browser security headers including Content Security Policy (CSP) directives to help prevent cross-site scripting (XSS) attacks and unauthorised content injection. These headers instruct your browser to only load resources from trusted, explicitly listed sources, significantly reducing the attack surface of the platform.

If you discover a security vulnerability on VTU Easy, please report it responsibly by emailing vtu.easy@gmail.com with the subject line "Security Vulnerability Report." Please include a description of the vulnerability, steps to reproduce it, and any relevant screenshots or logs. We take all security reports seriously and aim to acknowledge your report within 24 hours and resolve confirmed vulnerabilities as quickly as possible. We follow responsible disclosure practices and appreciate the efforts of security researchers who help keep the platform safe.

This Privacy Policy is governed by and construed in accordance with the laws of India, specifically the laws applicable in the state of Karnataka, where the VTU Easy platform is operated.

The primary Indian legislation relevant to this Privacy Policy includes: the Information Technology Act, 2000 (the foundational statute for cybersecurity and electronic data in India); the Information Technology (Amendment) Act, 2008 (which strengthened data protection and cybercrime provisions); the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (which define what constitutes sensitive personal data and require reasonable security practices); and the Digital Personal Data Protection Act, 2023 (DPDPA), India's comprehensive data protection legislation which establishes rights for data principals (individuals) and obligations for data fiduciaries (organisations that process data).

While VTU Easy's primary audience is VTU engineering students in India, we recognise that visitors from the European Economic Area (EEA) may access the platform. We make reasonable efforts to align our data practices with the principles of the General Data Protection Regulation (GDPR), including data minimisation (collecting only what is necessary), purpose limitation (using data only for stated purposes), and transparency (clearly disclosing all data practices in this policy). For personalised advertising, Google AdSense will present a consent mechanism to EEA visitors in accordance with GDPR and the ePrivacy Directive.

Data processed by Google Analytics and Google AdSense may be transferred to and stored on Google's servers in various countries globally. Google provides appropriate safeguards for these international transfers through Standard Contractual Clauses (SCCs) approved by the European Commission, as detailed in Google's Data Processing Terms.

If you have a dispute or concern regarding this Privacy Policy or our data practices, please first contact us by emailing vtu.easy@gmail.com. We will make good-faith efforts to resolve your concern promptly. Any unresolved disputes shall be subject to the exclusive jurisdiction of courts in Karnataka, India. By using VTU Easy, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.