This policy outlines how EduRep Observatory handles your digital footprint. It is informed by an analysis of the legal limitations faced by investigative journalism portals. We prioritize radical transparency about the limits of digital anonymity.
We operate under Indian law, where no absolute legal privilege protects whistleblowers or journalistic sources from state scrutiny. By submitting data to this platform, you acknowledge that state agencies can compel access to third-party infrastructure. Your best defense is operational security (OpSec) prior to the point of submission.
All data, metrics, and records presented on this platform are aggregated directly from established press outlets, official journalism portals, and government records. None of the facts or data are fabricated, fake, or manufactured by us. We merely index and showcase the reality of what is happening in our country—whether good or bad. Our intent is purely informative and civic-minded; we do not aim to defame or harm any individual, organization, or institution.
EduRep Observatory is built on the principle of absolute data minimization. We do not use Google Analytics, tracking cookies, or invasive user profiling. Our server logs are configured to drop IP addresses and identifying metadata as quickly as technically feasible. We cannot be compelled to hand over data that we do not possess.
While we offer a Secure Intake Portal, standard web submissions (even over HTTPS) leave a digital footprint, including your IP address, ISP details, and timestamp. If you are a whistleblower leaking highly sensitive government or institutional documents, DO NOT use our standard web form on your personal network. We strongly advise using the Tor Browser and communicating via our public PGP keys.
As an entity operating within the legal framework of India, we are subject to the Code of Criminal Procedure (CrPC) and the Digital Personal Data Protection (DPDP) Act. India does not currently have a comprehensive 'Shield Law' protecting journalistic sources. If we are served with a valid, legally binding court order or warrant, we are legally obligated to comply. This is why we practice extreme data minimization.
EduRep Observatory relies on third-party infrastructure (such as Vercel for hosting and managed PostgreSQL for databases). Even if we protect your data, these corporate entities have their own privacy policies and can be subpoenaed independently by law enforcement. Assume that any unencrypted traffic passing through our hosting providers can be intercepted.
In our footer, you will find a cryptographic Warrant Canary. It is updated regularly to confirm that we have not been served with any secret subpoenas, National Security letters, or gag orders. If the Canary stops updating or disappears entirely, assume our infrastructure has been compromised or we are legally restrained from communicating.
Last Updated: 7/21/2026
For highly sensitive communications, request our public PGP key.