Last updated: 20 Oct 2026
1. Introduction
Dhajaya (‘we’, ‘us’) is an independent public platform where people in Sri Lanka vote on issues and suggest topics. We handle your personal information in line with Sri Lanka’s Personal Data Protection Act, No. 9 of 2022. By using the site, you agree to this policy.
2. What we collect
- Google or Facebook login: your name, email address and, if shared, your profile picture. We never receive your Google or Facebook password.
- Email login: your email address and a password, which is stored in protected form that we cannot read.
- Contact form and subscriptions: your email address, your name if given, and your message.
- Topic suggestions: the topic, your reasons and sources, and your email address so we can tell you the status if needed.
- Votes and comments: your votes, your comments and display name, and optional details such as your district and age group.
- Technical data: IP address, browser and device type, pages visited, and cookies.
We do not ask for your ID card number, financial details or political or religious affiliation, and we do not access your contacts, photos or location.
3. How we use it
We use your information only to:
- run your account and let you log in;
- make sure each person votes once on each poll;
- reply to you and send the updates you asked for;
- detect fake accounts, duplicate votes and abuse, and keep the site secure;
- meet our legal obligations.
We do not sell your information or use it for advertising.
4. Your identity and your votes
- Individual votes are never made public. We publish only combined results, and we never reveal how any person voted.
- Identity and vote data are stored separately, so votes cannot easily be traced to you. Only a few authorized team members can access account details.
- Topic suggestions are anonymous. Your identity is not revealed to anyone outside our moderation team. Your name appears on a poll only if you agreed to it. Otherwise it is published as Anonymous, and you can withdraw your consent at any time.
- Comments are public and show the display name you choose, which can differ from your real name. Please do not post personal details in comments.
5. Email addresses
We collect your email address when you log in with email, use the contact form, subscribe, or submit a topic. We do not share, rent or sell it to any third party. We use it only for the purpose you gave it. You can unsubscribe at any time using the link in each email.
6. Third parties
- Google and Facebook process your login under their own privacy policies. You can choose email login instead.
- Service providers such as web hosting, analytics, security and email delivery process data only on our behalf, to run the site.
- Legal requirements: we may disclose information if required by law or a court order. Where allowed, we will tell you first and share only what is required.
We share your personal information with no one else.
7. Cookies
We use cookies to keep you logged in, remember your language, and protect the site against bots. You can control cookies in your browser, but blocking essential ones may stop login and voting from working.
8. How long we keep it
- Account details: while your account is active, and deleted when you close it.
- Votes: kept as anonymous combined data after you delete your account, so published results stay accurate.
- Contact messages: 12 months after resolution.
- Subscription emails: until you unsubscribe.
- Suggestion emails: deleted 6 months after the decision, or sooner on request.
- Technical logs: 90 days, unless needed for a security investigation.
9. Security
We use encrypted connections (HTTPS), protected password storage, access controls and backups. No system is completely secure. If a breach affects your data, we will act to contain it and notify the people and the authority concerned, as the law requires.
10. Your rights and privacy settings
You have the right to see, correct and delete your information, to withdraw consent, and to object to certain uses. In your account you can:
- choose whether to be named on topics you suggest;
- set your public display name;
- manage or turn off update emails;
- choose whether to share your district and age group (both optional);
- download your data, or delete your account.
To use these rights, use your account settings or contact us. We will respond within 30 days. If you are not satisfied, you may contact the Data Protection Authority of Sri Lanka.
11. Children and data stored abroad
This site is for people aged 18 and over, and we do not knowingly collect children’s information. Some providers, including Google, Facebook and our hosting services, may process data outside Sri Lanka under appropriate safeguards.
12. Changes
We will post a notice on the site when we make important changes to this policy, and update the date at the top. Questions: Contact us via site’s Contact form.