Privacy Policy & Property Data Protection

1. Zero-Knowledge Information Architecture

LostLink is engineered under privacy-by-design principles. When submitting a lost report, sensitive identifiers (e.g., partial device serial numbers, lockscreen descriptions, hidden pocket contents) are designated as confidential evidence. These fields are strictly isolated from the public directory and public search indexes.

2. Data Collected from Students and Campus Members

To maintain an authentic student community, LostLink collects:

• Institutional email address (@edu domain) for SSO identity verification.
• Student full name and university identification number for campus custody pickup verification.
• Item descriptive attributes (category, color, make/brand, campus facility where lost or found).
• Public photographs voluntarily uploaded by reporters.

3. Institutional Scoping and Access Boundaries

Reports and ownership verification answers are partitioned by university domain. Campus administrators and designated lost & found custodians can review claims originating within their institution. Data is never sold or utilized for targeted third-party advertising.

4. Regulatory Notice

This document represents draft terms designed for academic evaluation under Cloud Computing Module IV PBL requirements. Formal deployment requires approval from participating university Office of General Counsel and Data Protection Officers.