Privacy Policy
Last updated: 3 November 2026
This policy explains what information Kalvi Papers (kalvi.lk and the Kalvi Android app) collects, how it is used, and the choices you have.
Information we collect
You don't need to create an account or give us personal details to browse or download papers. On the website we only collect the following:
- Anonymous visitor ID: a random identifier stored in a cookie (uix) on your first visit. It is not linked to your name or email.
- Preferences: the language (lang) and interface version (ui) cookies, which remember your choices.
- Usage events: page requests, response times, and paper downloads (grade, subject, paper type, and paper ID). These are sent to Google Analytics with your anonymous visitor ID. Search terms are not sent.
- Administrator sign-in: site administrators sign in with a username and password, and a session cookie (snake) keeps them signed in. This applies only to administrators.
- Messages: if you email us, we receive your email address and whatever you write.
How we use information
We use this information to keep the site working, remember your language and interface choices, understand which papers are useful and how the site performs, keep administrator accounts secure, and reply to messages. We do not sell personal information, and we do not use it for advertising.
Third parties
We use Google Analytics to measure site usage. Google processes these events under its own privacy policy. We share information with the server that hosts the site only as needed to run it. We may disclose information where the law requires it.
Kalvi Android app
The Android app does not require an account, does not include third-party analytics or advertising SDKs, and does not request any device permissions. It does not collect personal information. If the app starts collecting data in the future, this policy will be updated and the change announced in the app's release notes.
How long we keep information
The anonymous visitor ID cookie lasts about 399 days, and the interface preference cookie lasts the same length. Administrator session cookies last until the administrator signs out or the session expires. Analytics data is kept according to Google Analytics' retention settings. Emails are kept for as long as needed to answer them and keep a record of the request.
Your choices
You can block or delete cookies in your browser settings. Doing so may reset your language and interface preferences. If you delete the uix cookie, a new anonymous ID is created on your next visit. To ask what information we hold about you or to ask us to delete it, email us at the address below.
Students and children
Many of our users are students, and some of them are children. We don't knowingly ask children for personal information. If you believe a child has sent us personal information, contact us and we will delete it.
Security
We take reasonable steps to protect the information we hold, such as limiting access to administrator accounts. No online service is completely secure. Please report security issues as described on our security page.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be announced on the website.
Contact
For questions about this policy, email us at the address below.