Privacy Policy

1. Introduction & Institutional Scope

Paper Umbrella Studios ("we", "our", or "us"), headquartered in Jorhat, Assam, operates the digital museum platform Echo (accessible at https://paperumbrellastudios.in). This Privacy Policy explains our practices regarding the collection, storage, protection, and disclosure of visitor information in full compliance with applicable Indian information technology statutes, the Digital Personal Data Protection (DPDP) Act 2023, Google AdSense publisher policies, GDPR, and global data privacy standards.

As a public educational cultural repository, our primary mission is the preservation of living civilizational knowledge. We believe in data minimization: we collect only the minimal data required to deliver high-performance access, ensure infrastructural security, and support educational research.

2. Google AdSense, DoubleClick DART Cookies & Third-Party Advertising

This website uses Google AdSense (Publisher ID: ca-pub-9702356035143268), a web-advertising service provided by Google LLC ("Google"). Google AdSense and third-party advertising vendors use cookies—small text files placed on your computer or mobile device—to analyze how visitors interact with the site and serve relevant, non-intrusive advertisements based on a user's prior visits to this website or other sites on the Internet.

Third-party vendors, including Google and its certified ad technology partners, use DoubleClick cookies (including the DoubleClick DART cookie and '__gads' / '__gpi' identifiers) to serve advertisements based on your visit to Echo and/or other sites across the World Wide Web. Google's use of advertising cookies enables it and its partners to serve personalized advertisements to our users based on their browsing history.

Users may opt out of personalized advertising at any time by visiting Google Ads Settings. Alternatively, visitors can opt out of a third-party vendor's use of cookies for personalized advertising by visiting the Network Advertising Initiative (NAI) opt-out portal at www.aboutads.info/choices/ or YourAdChoices at https://youradchoices.com/.

When a visitor in the European Economic Area (EEA), the United Kingdom, or jurisdictions requiring affirmative consent declines personalized tracking via our on-screen consent banner, we request non-personalized ads (requestNonPersonalizedAds = 1) from Google AdSense. In this mode, Google serves contextual advertisements without deploying behavioral tracking cookies, ensuring full compliance with GDPR, CPRA, and ePrivacy directives.

3. Analytics & Web Telemetry (GA4)

We use Google Analytics 4 (Measurement Tag: G-K8PRYF5R91) to evaluate audience engagement, monitor page loading performance across regional network connections, and analyze general visitor navigation patterns through our state cultural halls.

Google Analytics 4 operates with automatic IP anonymization enabled: full IP addresses are masked prior to transmission, and data is aggregated solely for architectural optimization, caching refinement, and server load balancing. We do not correlate analytics data with personally identifiable information, nor do we sell, rent, or trade visitor data to commercial data brokers.

4. Data Security, Edge Caching & Infrastructure

All communication between your browser and Echo is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS). Our digital museum infrastructure is distributed across Cloudflare's global edge network, providing advanced Distributed Denial of Service (DDoS) mitigation, Content Security Policy (CSP) enforcement, and strict security headers (including X-Content-Type-Options: nosniff and Referrer-Policy: strict-origin-when-cross-origin).

5. User Rights, Access, Correction & Erasure

Under applicable data protection laws, visitors and registered community contributors possess clear rights regarding their personal data:

• Right of Access: You may request a copy of any personal information or correspondence held by our desk.
• Right to Rectification: You may request immediate correction of inaccurate or incomplete historical attributions.
• Right to Erasure: You may request the deletion of account records, profile information, or community submissions.
• Right to Withdraw Consent: You may withdraw consent for optional cookies or newsletter communications at any time.

6. Data Protection Officer & Inquiries

For any inquiries regarding data governance, privacy compliance, or to exercise your statutory rights, please contact our designated Data Protection Officer:

Email: echo@paperumbrellastudios.in

Postal Address: Data Protection Officer, Paper Umbrella Studios, Jorhat, Assam, India — PIN 785001

We review and respond to all verified privacy requests within 30 days of receipt.