Privacy Policy & Zero-Server Data Guarantee

1. Foundational Privacy Commitment: Zero Server Uploads

At MaskDoc (accessible via https://maskdoc.in), our primary objective is the protection of citizen identity. We operate under an absolute technological architecture of zero data collection.

When you select, drop, or edit an Aadhaar card, PAN card, Voter ID, Passport, or Driving Licence within MaskDoc:

• Your documents never leave your computer or mobile device.
• No image files, binary streams, or raw pixel data are transmitted over the internet to our servers or any third-party clouds.
• All document redaction, optical character recognition (OCR), QR code mosaic blurring, and PDF rendering take place entirely within your browser's ephemeral RAM using WebAssembly (WASM) and isolated Web Workers.
• You can inspect network requests in your browser's Developer Tools (Network tab) or activate Airplane Mode before processing to independently verify that zero packets are dispatched.

2. Information We Do Not Collect

Unlike conventional web applications and document conversion portals, MaskDoc has no user database, no backend file store, and no registration portal:

• No Personal Identifiable Information (PII): We do not log names, Aadhaar numbers, PAN numbers, addresses, dates of birth, or biometric photographs.
• No User Accounts: We do not require account creation, email addresses, phone numbers, or passwords.
• No Tracking Cookies: We do not deploy first-party profiling cookies, device fingerprinting, or behavioral analytics scripts.

3. Technical Architecture & In-Memory Execution

MaskDoc relies strictly on standards-compliant HTML5 Canvas APIs, WebAssembly binaries, and Web Worker threads. When you export an altered document or print-ready dual-side A4 PDF:

1. The file is created in client-side memory as an ephemeral Blob URL (blob:https://maskdoc.in/...).
2. Your browser triggers a local file download directly to your device storage.
3. Once you close or refresh the browser tab, all document buffers in volatile memory are immediately wiped by your browser's garbage collector.

4. Third-Party Advertising & Monetization

To keep MaskDoc free, independent, and accessible to all citizens without charging subscription fees or paywalling privacy tools, we may display non-intrusive advertisements served by third-party vendor networks such as Google AdSense.

• Third-Party Cookies & Ad Serving: Third-party vendors, including Google, use cookies, web beacons, and similar technologies to serve ads based on a user's prior visits to this website or other websites across the Internet.
• Advertising Cookies: Google's use of advertising cookies enables it and its partners to serve relevant ads to users based on their visits to MaskDoc and/or other sites on the Internet.
• Google Partner Policy Disclosure: For detailed transparency regarding how Google collects and processes data when you visit sites that use Google services, please review How Google uses information from sites or apps that use our services.
• Personalized Ad Opt-Out: Users may opt out of personalized advertising at any time by visiting Google Ads Settings. Alternatively, you can opt out of third-party vendors' use of cookies for personalized advertising by visiting aboutads.info.
• Strict Local Isolation Guarantee: Third-party advertising tags and scripts operate in complete isolation from our client-side editing and rendering environment. Advertisers and third parties have zero access, visibility, or telemetry into your uploaded files, Canvas redaction coordinates, masked images, or exported documents.

5. Compliance with Indian Privacy Laws (DPDP Act, 2023)

MaskDoc is designed to advance the core principles of India's Digital Personal Data Protection Act (DPDP Act), 2023 (Act No. 22 of 2023):

• Zero Data Collection by Design: Because all document processing, redaction, and rendering execute exclusively within your local hardware RAM via WebAssembly, MaskDoc does not collect, store, share, or log your digital personal data.
• Data Minimization (Section 6): By redacting the first 8 digits of Aadhaar cards and unnecessary identifiers, citizens effectively enforce data minimization before handing copies to third parties.
• Purpose Limitation: Watermarks restrict KYC photocopies to designated transactions (e.g., rental leases, hotel registrations) to prevent secondary unauthorized use.
• Data Principal Rights (Section 11, 12 & 13): Citizens retain full sovereignty over their identity credentials. Because MaskDoc never receives or stores your files, no personal data exists on our infrastructure to access, correct, or erase.

6. Statutory Grievance Redressal Officer (IT Rules, 2021 & DPDP Act, 2023)

In compliance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 13 of the DPDP Act, 2023, MaskDoc has designated a Grievance Redressal Officer: