Privacy Policy
Last updated 22 September 2026
BABI's Tutorials (ebarvideos.hasantha.online) is a small, private study library. One person runs it for one other person: it keeps her exam tutorials — videos, PDFs, Word documents, pictures and voice memos — in one place she can open from her phone. It is not a commercial service, it has no public sign-up, and it shows no advertising.
This page explains what the site keeps, why, and where.
What the site keeps
- Signing in. The site uses a shared password, not accounts. There are no names, email addresses or profiles. When you sign in, the site sets one session cookie so you stay signed in, for up to 30 days.
- The library itself. The files added to the library and the details shown with them: title, file type, size, running time, a thumbnail, and the link a video was saved from. The files are stored in the site owner's Google Drive. The list of files, and the thumbnails, are kept on the site's server.
- Technical records. Like any website, the server records each request it receives: the IP address, the page asked for, and the time. These records are used to keep the site running and secure. Failed sign-in attempts are counted by IP address for 15 minutes, to stop anyone from guessing the password. That count is only kept in memory and is never saved.
Google user data
The site connects to exactly one Google account, the site owner's, through the Google Drive API. That connection is how the library stores its files. Nobody else is ever asked to sign in with Google.
With that access, the site only:
- lists the files in the one Drive folder that holds the library;
- reads those files, to play or open them on the site, and reads Google's own thumbnails for them;
- uploads new library files into that folder;
- moves a file to Drive's trash when it is deleted from the library;
- reads the account's email address, to show the owner which account is connected.
It does not read, change or share anything else in the Drive, and it never uses Google data for advertising, profiling or training AI models. No person reads Google user data except the site owner, when managing their own library. The Google sign-in token is kept on the site's server in a file only the application can read. It is never shared.
The site's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
The owner can revoke this access at any time from Google Account → Third-party connections. After that, the site can't reach the files until it is connected again.
Cookies
There is only one cookie: the sign-in session. The site has no analytics, tracking or advertising cookies. The page's fonts load from Google Fonts, which means your browser contacts Google when the page opens.
Who else is involved
No data is ever sold or rented to anyone. The only outside services are the ones that make the site work:
- Google: Drive stores the files, and Google Fonts serves the fonts.
- YouTube: when a YouTube link is added, the video is fetched from there.
- The hosting provider: runs the server the site lives on.
How long things are kept
Library files stay until they are deleted. A deleted file goes to Google Drive's trash, where Google keeps it for 30 days before removing it. Parts of recently played files are kept briefly on the server so playback is smooth, and are cleared automatically as newer ones replace them. Server records are rotated and deleted routinely.
Security
The site is served over HTTPS and only signed-in visitors can see anything. Repeated wrong passwords are locked out. The Google token and other secrets are stored with owner-only file permissions on the server.
Your choices
If anything in the library concerns you, including something you added, ask the site owner to remove it and it will be deleted.
Changes
If the way the site handles data changes, this page will be updated and the date at the top will change with it.
Contact
Questions about this page, or a request about your data, can go to the site owner directly.