Privacy Policy

What we store, and why

• Your NetID and password, encrypted together. We use them only to log in to the Student Portal for you again when SRM ends its session, so you are not asked to log in every day.
• The Student Portal session ID issued by SRM, also encrypted.
• A SHA-256 fingerprint of your SRM VERSE sync token, never the token itself. It lets us confirm a request uses the exact token we issued to you.
• Your student ID number and the expiry date, in readable form, so we know which records to delete and when.

Attendance and marks fetched this way are never stored. They are loaded fresh from SRM on every request.

How it is encrypted

• AES-256-GCM with a 256-bit key. GCM also detects any tampering: altered data fails to decrypt instead of producing a wrong value.
• A new random IV for every value, so encrypting the same password twice gives two completely different results.
• Each value is locked to its own record. Encrypted data copied to another student's record cannot be decrypted.
• The key is kept apart from the database, in the server's secret configuration. A copy of the database alone cannot reveal any password.
• Never shown or logged. Your password is never returned by any API, written to logs, or shared with anyone.

Example: what our database actually holds

Suppose you log in with the password MyPass@123 and choose 30 days. The stored record looks like this (illustrative values):

{
  "_id": 679812,
  "credentials": {
    "keyId": "v1",
    "iv":   "q3Xk9P2mVt7Lr0Ab",
    "tag":  "Zr8sXo1Kp3VbQw7eLmN2aA==",
    "data": "8kJx0pQ2vT9wYc4LmZs1Rf6HdA3uBn7Ke5GiOq=="
  },
  "expiresAt": "2026-11-02T06:56:02Z"
}

• _id is your student ID, and expiresAt is when the record deletes itself.
• data is your NetID and password after encryption. iv is the random value used for this one encryption, tag is the tamper-detection code, and keyId names the key, so keys can be replaced over time.
• Neither MyPass@123 nor your NetID appears anywhere in the record. Without the server's key, data is meaningless.

When it is deleted

• Automatically, when the 7, 15 or 30 days you chose run out.
• Immediately when you tap “Logout SP” or log out of SRM VERSE. This removes your credentials and every Student Portal session for your account.
• Immediately if SRM rejects the stored password, for example after you change it.