Privacy Policy & Data Governance Framework
This comprehensive Privacy Policy and Data Governance Framework establishes the normative guidelines, cryptographic modalities, and regulatory compliance paradigms under which UTeM Confessions Pro Max (UCPM) processes, manipulates, isolates, and safeguards informational artifacts across its multi-tiered student digital infrastructure, third-party advertising exchanges, and client-side computational utilities.
Our confession submission system is engineered to prioritize anonymity. We do not collect personal identifiers, names, phone numbers, email addresses, or IP addresses when you submit a confession. Submissions are transmitted as plaintext statements. To protect your privacy and that of others, please refrain from typing personal names or identifiable details in your confession body.
The platform utilizes W3C-compliant document-oriented HTML5 Web Storage Application Programming Interfaces (specifically isolated window.localStorage partitions) to execute decentralized, non-relational deterministic computations directly within the client’s sandboxed browser context. Execution artifacts generated by the GPA/CGPA Forecasting Module, Academic Chronometry Timers, Transit Matrix Lookups, and Cartographic Schemas reside exclusively within the local browser runtime filesystem. In consequence of this partitioned architectural topology, zero computational payload, numeric telemetry, grade coefficient variables, or idiosyncratic scheduling inputs are transmitted across remote transport-layer security (TLS) networks to server-side relational databases. Furthermore, persistent cryptographic token state flags governing thematic chromatic luminosity (Dark/Light mode) and monotonic anti-spam rate-limiting delta timestamps (enforcing a non-bypassable 30000-millisecond queuing latency) remain strictly localized, precluding extrinsic exfiltration.
To sustain operational overheads, the application integrates multi-tenant algorithmic ad exchange protocols orchestrated primarily by Google AdSense and its associated programmatic syndicate networks. These third-party programmatic networks instantiate specialized tracking vectors, session-persistent algorithmic beacons, and probabilistic DoubleClick DART heuristic cookies within the user's user-agent cache. These instruments systematically aggregate contextual browsing signatures, domain-level referrers, and cross-site traversal telemetry to compute predictive demographic indices and serve hyper-targeted programmatic display units. Users retain the unconstrained prerogative to execute bilateral opt-out revocations via the centralized Google Advertising Preferences Protocol (adssettings.google.com) or through cross-industry consortia mechanisms such as the Network Advertising Initiative (NAI) and Digital Advertising Alliance (aboutads.info).
In tandem with primary ad syndicates, supplementary algorithmic monetization platforms (specifically Monetag and its distributed edge delivery domains including, without limitation, 5gvci.com and n6wxm.com) execute autonomous client-side JavaScript payloads, asynchronous pixel beacons, web worker threads, and interstitial vignette container initializations. Upon invocation of an interstitial or banner render request, the user's internet protocol (IP) routing header is mechanically parsed by upstream content delivery nodes to infer coarse-grain geographical telemetry (e.g., Autonomous System Numbers, municipal routing nodes) strictly for geolocation-based supply-side mediation without synthesizing persistent identifiable consumer profiles. Furthermore, the client environment persists deterministic frequency-capping state primitives within window.localStorage partitions (specifically utilizing the designated key lastVignetteTime) to throttle programmatic vignette render invocation intervals to a minimum non-configurable threshold of 900,000 milliseconds (15 minutes). These external monetization providers govern the operational lifecycles of their respective dynamic tracking artifacts in strict accordance with their sovereign, uncoordinated privacy disclaimers, whereupon UCPM disclaims vicarious architectural culpability for third-party client memory allocations, remote script execution boundaries, or vendor-side data ingestion protocols.
The platform deploys Google Analytics 4 (GA4) instrumentation hooks configured with automated Internet Protocol anonymization masking (gtag.js architecture). The analytical pipeline captures exclusively anonymized, macro-level telemetry—comprising viewport aspect ratios, user-agent hardware categorization, render latency metrics, and aggregate interaction event frequencies. Such statistical aggregations are divested of granular personal identifying characteristics (PII) and are utilized solely to diagnose cumulative layout shifts (CLS), optimize network throughput distribution, and audit computational responsiveness across diverse mobile and desktop screen form factors.
Pursuant to the statutory stipulations codified within the Children’s Online Privacy Protection Act (COPPA) and congruent international legal frameworks, this service is expressly demarcated for use by tertiary university undergraduates, diploma scholars, academic staff, and autonomous adult cohorts aged 18 and older. The platform disavows any intentional solicitation, indexing, or processing of informational entities emanating from individuals sub-13 years of age. Should empirical evidence emerge substantiating unauthorized minor engagement resulting in transmission of identifiable records, immediate purge routines are executed upon receipt of verifiable notice.
Informational governance methodologies operationalized within this infrastructure align conceptually with the core tenets of the Malaysian Personal Data Protection Act 2010 (Act 709 / PDPA) and general international data sovereignty standards. Users maintain statutory entitlements to petition for diagnostic confirmation regarding the non-existence of indexed personal dossiers, demand the irrevocable deletion of erroneous or intrusive user-generated submissions, and file formal redress petitions concerning third-party data processing behaviors via designated administrative transmission pipelines.
Should a data subject ascertain that an approved, publicly distributed anonymous post contains covert identifying vectors, defamatory inferences, or infringed privacy materials, the subject possesses the procedural right to invoke our fast-track cryptographic redaction workflow. Processing requires formal transmission of the exact record index accompanied by authenticating rationale to our designated compliance endpoint (utemconfessionpromax@duck.com) or Telegram node (@utemconf), triggering permanent record invalidation across content databases within 24 business hours.
Our digital corpus contains external hypertext links directing user sessions to external domain endpoints (e.g., official UTeM SMPWeb portals, myPTPTN gateways, Google Forms document collectors, and transportation mapping servers). Following client-side click-event delegation resulting in navigations beyond the origin host domain (utemconfession.github.io), this Privacy Policy ceases applicability. UCPM maintains zero architectural oversight, control, or liability regarding the data processing mechanisms, cookie retention policies, or cybersecurity controls maintained by exogenous host operators.
The administration reserves the untrammeled prerogative to periodically enact unilateral modifications, addenda, and structural revisions to this governance covenant to accommodate evolving statutory mandates, programmatic ad exchange regulations, or infrastructural adjustments. Any revised framework takes instantaneous constructive effect upon deployment and timestamp publication within this document. Continued client-side HTTP/HTTPS requests to the platform following such updates constitute definitive, irrevocable constructive assent to the governing terms herein.