Privacy Policy

This page explains what Atria Research (research.atriasafety.org) collects, why, and what you can do about it. It applies to this document library specifically. For how the rest of Atria handles data, see the privacy information at atriasafety.org. In line with Atria's own principles: we collect only what this service strictly requires, we'll never sell your data, and what we collect and why is documented right here.

Browsing the public library

You can browse, search, and download any public document without providing any personal information, creating an account, or accepting any cookies beyond what's strictly needed to run the site.

Restricted documents

Some documents in this library are marked restricted and require a password to view. To unlock one, you also have to accept our Confidentiality Policy: restricted documents are shared only with people Atria has authorized in writing, and re-sharing them isn't permitted. When you unlock one, we collect and store:

• Your name. If your password was personalized to you, we already know who you are and use that; otherwise you tell us, and we don't verify it against any ID or account.
• Your IP address, as seen by our server at the moment you unlock the document.
• Your browser's user-agent string (browser and operating system information sent automatically by your browser).
• The date and time you unlocked the document, and confirmation that you accepted the confidentiality terms.

We also stamp a visible watermark (your name and the words "Atria Confidential") into the actual PDF file you view or download. This isn't cosmetic: it's baked into the file itself, so any copy that leaves the authorized circle carries a record of whose access it came from. See the Confidentiality Policy for why.

Logging happens once per unlock. After that, your browser holds a temporary access cookie for 12 hours so you aren't asked again on every page load. We record this specifically because these documents are restricted: knowing who has accessed sensitive or limited-distribution material lets us keep an audit trail, notice if a document link has leaked or is being misused, and know who to reach if a restricted document needs to be corrected or withdrawn. We don't collect any of this for public documents.

Cookies

We use two kinds of cookie, both strictly functional, with no advertising or third-party tracking cookies of any kind:

• An access cookie, set when you unlock a restricted document, so you don't have to re-enter the password for 12 hours.
• An admin session cookie, set only for library administrators who log in to manage documents.

Both are signed, sent only to this site, and expire automatically.

Who can see this data

Access logs are visible only to Atria Research administrators, through the admin panel. We don't share, sell, or otherwise disclose this data to any third party. Deleting a restricted document from the library also permanently deletes its entire access log.

How this data is protected

Document passwords are hashed (never stored in plain text). Session and access cookies are signed and marked HTTP-only so they can't be read or tampered with by page scripts. We don't run any analytics, advertising, or third-party trackers on this site.

Your rights

You can ask us what access-log entries exist for a name or IP address associated with you, and ask us to correct or delete them. Reach out any time at [email protected].

Children's privacy

This service isn't directed at children, and we don't knowingly collect information from anyone under 13.

Changes to this policy

If this policy changes, we'll update this page and the date at the top. For material changes, we'll make that clear here rather than quietly editing the page.

Contact

Questions about this policy or how your data is handled: [email protected].