Privacy
This site is run by Abdul Rashid Talukder Memorial Public Library, on Libnora. Abdul Rashid Talukder Memorial Public Library owns and is responsible for its data; below is how that data is kept and protected.
Last updated: 2 November 2026
Libnora is an online service made by Sarotia; public libraries use it for their website, competition registration and other work. Each library owns and is responsible for its own data; Sarotia runs the service on their behalf and keeps the data safe.
What is kept
Guardian account: mobile number, a 6-digit PIN (only as a one-way hash — nobody can read the PIN), and an optional name and email.
Registration: the student's name, date of birth, gender, photo, school and class; the parents' names and address; fees, receipts and bKash/Nagad/Rocket/Upay transaction details. What you type while filling in the form is also kept in your account, so you can come back and carry on.
The family's kept details — only with your consent (the tick when opening the account, or later from the account page): each family member's name, parents' names, date of birth, gender, photo, address, school and class, so that the library's later competitions, programmes and membership need no retyping; once a library member, the history of which books were borrowed and when. When consent was given, and to which text, is recorded too.
If you sign in with Google, Google tells us only your email address and an identifier for your Google account — not your name, photo, contacts or anything else.
Who sees it, and why
Only that library's staff see the data, for registration, fees, admit cards, results and certificates. A student's photo is seen only by staff and goes on the admit card. A student's name is published on a merit list when the name-publishing box on the registration form is ticked — it starts ticked; if the guardian unticks it, the list shows only the roll number. Registrations made before 2 November 2026 were given the tick too (the box used to start empty); until results are published you can change it yourself on the application page in your account; after results are published, to take the name off, tell the library — staff remove it.
A few companies help run the service: servers (Hostinger), web protection (Cloudflare), SMS (ADN) and email (Resend) — each receives only what that task needs.
Reading history is seen by the member and their guardian in their own account; staff see it only with a separate permission, and every look is written to the audit log.
Data is never sold and never used for advertising; children are never targeted with recommendations or profiling.
Protection and how long
Connections are encrypted (https); each library's data is separate and no library sees another's; important actions are written to an audit log; backups run daily.
The family's kept details and reading history stay until consent is withdrawn; registration data is kept as long as the library needs it.
Consent can be withdrawn any time from the account page — the kept details and photos are then deleted. To see, correct or delete your own or your child's data, tell the library.
Contact
Questions about a registration or its data: your library. About the service: Sarotia — sarotialab@gmail.com, sarotia.com/contact.