Privacy Policy

1. Minimal Data Collection

We do not extract or store personally identifiable information for marketing, behavioral targeting, or secondary sales. Your data footprint on our platform is restricted to your institutional email address (e.g., @makopan.edu.hk or @bunorden.com). This identifier is essential exclusively for strictly enforcing identity verification and authorizing access to closed educational materials.

2. Modern Authentication & Database

We leverage Supabase (built on PostgreSQL) for our core identity and data layer management. During your session lifecycle:

• Your authentication state and credentials are encrypted and stored via Supabase Auth, adhering to rigorous industry security standards.
• Supabase utilizes temporary identifiers (JSON Web Tokens) to seamlessly authorize your session across requests.
• Granular Row Level Security (RLS) is persistently applied to all data transactions, guaranteeing mathematically sound data isolation and privacy.

3. Hosting & Secure Edge Delivery

The MKP Chinese platform is natively engineered to run on Vercel and Cloudflare R2, meaning your access requests are processed at the edge safely:

• Vercel Edge Functions: We use ephemeral serverless compute to issue one-time, cryptographically signed URLs. These functions securely generate the link and immediately terminate.
• Cloudflare R2: The PDFs themselves are isolated in a private R2 bucket, entirely disconnected from the public internet.
• No-Log Operations: Both Vercel and Cloudflare process diagnostic logs strictly for mitigating DDoS anomalies and ensuring platform uptime; they do not cross-reference with your identity.

4. Essential Dependencies

To fulfill a functional viewing experience without downloading PDFs to your device, we utilize PDF.js via established Content Delivery Networks (CDNs). While these are required for our in-browser Secure Viewer, they strictly process your requests as standard untargeted web traffic without pervasive fingerprinting.

5. Total Extinguishment Right

You inherently possess the right to fully extinguish your digital presence on our platform. To execute a comprehensive deletion of your account instance and all correlated data metrics, contact the global administrator directly via Telegram (@jayyyyyden_hk) or email (contact@bunorden.com). Executions are finalized within 1-3 business cycles.

6. Iterative Policy Modifications

As our technical infrastructure matures, so might these protocols. We will revise this policy to transparently reflect our evolving structural footprint. Any enduring engagement with the platform subsequent to protocol alterations signifies implicit acceptance.