Sri Lankan PDPA Compliance

Cookie & Tracking Policy

Personal Data Protection Act (PDPA), No. 9 of 2022 • Last Updated: August 2026
Consent Transparency: In adherence to Part I of the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka, Getmore uses cookies and local cache storage tokens exclusively to deliver reliable student notifications, maintain authenticated sessions, and optimize mobile network performance.

1. Statutory Principles & Scope

This Cookie & Tracking Policy applies to all digital properties operated by Getmore LK within the Democratic Socialist Republic of Sri Lanka, including getmore.lk, associated subdomains, web management dashboards, and native mobile client caching engines.

We believe students deserve complete visibility over what telemetry or identifiers are stored on their personal devices. We do NOT use invasive cross-site advertising cookies or sell data brokers access to student behavioral profiles.

2. Cookies and Local Storage Technologies

Getmore uses two core browser technologies:

  • HTTP Cookies: Encrypted text tokens transmitted between your browser and our secure Sri Lankan API gateway to manage authenticated user sessions.
  • HTML5 LocalStorage & IndexedDB: Client-side storage allocated on your device to maintain encrypted offline course schedules, notification logs, and attendance counters so the app remains fully functional without an active mobile internet connection.

3. Lawful Categories of Cookies We Use

In accordance with Section 5 and Section 6 of the PDPA No. 9 of 2022, cookies are categorized as follows:

  • Strictly Necessary / Essential Cookies: Indispensable for security, authentication, and live WebSocket push delivery. These do not require optional consent as they are necessary for contract fulfillment.
  • Functional & Preference Cookies: Remember your preferred institutional filter, batch view, dark/light theme, and notification alert sounds.
  • Performance & Diagnostics Cookies: Anonymized metrics measuring mobile network latency across Sri Lankan internet service providers (Dialog, Mobitel, SLT-Mobitel, Airtel) to ensure sub-5-second push delivery speeds.

4. Statutory Cookie Register

Storage Key Category Lawful Purpose Retention Period
gm_auth_token Essential Maintains secure student session tokens across API calls. 30 Days / Session
gm_cookie_consent Essential Stores user choice under PDPA consent provisions. 12 Months
gm_cache_sync Functional Tracks offline synchronization timestamp for courses and exams. Persistent Local

6. Inquiries & Data Protection Officer

If you have any questions regarding our cookie practices under Sri Lankan law, contact our privacy compliance team at:

Data Protection Officer – Getmore LK

Email: privacy@getmore.lk / dpo@getmore.lk

Colombo, Western Province, Sri Lanka