Last updated: 25 Aug 2026
Jurisdiction: Bangladesh
Privacy Policy
Your identity is our top priority — Janai is designed to stay fully anonymous
TL;DR: Janai is fully anonymous. No name, email, phone, NID or exact GPS. Tracking via CR-XXXX-XXXX + secret token only.
1. What we don’t collect
- Name, email, phone, NID/passport, address
- Exact GPS or home address
- Device fingerprint or persistent cookies for citizens
If you paste PII in description, our detector flags it and moderators redact before publication.
2. Temporarily processed
| Data | Purpose | Retention |
|---|---|---|
| HMAC-SHA256(IP) | Spam/bot protection | 14 দিন |
| User-Agent hash | Abuse signal | 14 দিন |
| EXIF | Privacy | Stripped on upload, 30d quarantine |
| argon2id token | Anonymous follow-up | Hash only, shown once |
3. Location blurring
Published max district; upazila only if k ≥ 5. Map shows aggregated tiles, never exact pins.
k-anonymity ≥ 5 • district-aggregated
4. Evidence vault
- JPG/PNG/WebP/PDF/MP3/M4A/MP4 — MIME+magic+ext, 10/15/50MB
- Private S3,
quarantine/→ ClamAV →vault/ - 15-min signed URL, moderator only, audit logged
- No auto-public without approval
6. Legal basis — Bangladesh
• ICT Act 2006 (2013 amend.)
• Cyber Security Act 2023 (replaced DSA 2018)
• Right to Information Act 2009
• Draft PDPA 2022-23 — voluntary minimization & retention
Disclaimer: not legal advice.