This policy covers what NotePackets collects when you sign up for or manage a course update subscription, and how that info gets used, stored, and eventually deleted.

Who Runs This

NotePackets is an independent newsletter run by a student for sharing course material, study guides, and review material with classmates.

What We Collect

• Your personal email address, first name, and last name, which are provided by you during sign up.
• The courses you choose to subscribe to.
• The IP address associated with all signups, preference changes, or unsubscribe requests, included in the confirmation emails you receive as a security and audit record.
• The timestamp at which you first subscribe.
• When you sign up, Cloudflare Turnstile collects some technical signals from your browser and device to verify that you are really a human (e.g., User-Agent, TLS Fingerprint, and Internet Protocol). Cloudflare's handling of your data is governed by its own Turnstile Privacy Addendum, which you should refer to.
• Whenever you initiate a request to read or write data associated with a subscriber, we use FindIP to ensure your Internet Protocol address is not malicious. Refer to their Privacy Policy for more information. Please also note:
  1. We do not have access to a list of IP logs stored on FindIP's servers.
  2. The IP logs that FindIP stores are not associated with or tied to your subscription.

Website Traffic Logs

When you access our publicly available website files (such as HTML pages, study guides, and PDFs), we automatically record a raw server access log of your request. These logs capture technical details, including, but not limited to:

• Your IP address (e.g., 198.51.100.50).
• The date and timestamp of your request.
• The specific file you requested (e.g., /signup.html).
• The HTTP status response code (e.g., 200 OK).
• The browser User-Agent string detailing your operating system and browser type.
• The encryption connection attributes used to securely connect to our servers, including the TLS version (e.g., TLSv1.3) and the cipher suite used (e.g., TLS_AES_128_GCM_SHA256).

We use this data solely to monitor for website errors, track bandwidth usage, protect against malicious traffic spikes, and prevent third-party hotlinking or aggressive automated scraping of public student assets. These raw server logs are completely separated from our subscription list data, are kept strictly private, and are automatically deleted after 30 days.

Why We Collect It

This information exists only to operate the mailing list. That means sending you newsletters for your chosen courses, letting you know when your own subscription changes, and keeping our systems from being abused.

Who Can Sign Up

Signup is available for addresses from most popular email providers (e.g., Gmail, iCloud, Outlook). To permanently blacklist your email address, use the red-colored link provided in your subscription confirmation email or contact us at the address below.

Where It Is Stored

Your data is stored in a private and encrypted AWS Simple Storage Service Bucket that is not accessible to the public. It is not shared with or used by any third party for advertising.

How Long We Keep It

Your information is retained even after you unsubscribe, unless you send an email to the address below to have it removed. This is for the sole purpose of keeping your personal management link working, allowing you to quickly resubscribe later. If you would like to have your data permanently removed, please contact us at the address below.

Your Choices

Every newsletter we send includes a personal "Manage subscription" and "Unsubscribe" link. It can be used to change which courses you're subscribed to, or to unsubscribe from everything. This can be done without logging in at any time. Changes take effect immediately, and we'll always send you an email with your updated preferences.

What We Publish

On the homepage, we publish student-authored documents for the purposes mentioned in the section titled 'Who runs this.' All documents are publicly accessible and are free of any Personally Identifiable Information (PII).

What You Can Submit

Documents produced by students, in addition to the ones locally created, can be shared and included in our newsletter. Email tips@notepackets.com with any documents.

Rate Limiting

Signup requests are limited to 3 per hour per email address, and preference/unsubscribe requests are limited to 12 per hour per address. This is to mitigate potential spam and maintain our sending reputation with email clients.

Cookies and Tracking

This site doesn't use cookies or tracking scripts of its own. However, as previously mentioned, Cloudflare Turnstile, a third-party bot-check widget on the signup page, may create cookies to verify you're human.

Contact

Questions about this policy or your data can be sent to help@notepackets.com. Inquiries may take up to 10 business days to process, but they are often resolved within 1 business day.