Data handling at the counter
Your responsibilities once a customer's document lands on your machine. Ten habits, each one sentence long in practice.
The documents are on your computer, not ours
Files land in this browser's local storage on this machine. We cannot see them, recover them, or delete them for you. If someone else uses this computer under your login, they can see them too — so lock the screen when you step away from the counter.
Clear each customer when you finish serving them
“Mark as done” erases that customer's folder immediately. Make it a habit — do it while they are still standing there. The automatic expiry is a safety net, not a substitute.
Keep the QR under your control
Anyone who photographs a printed QR can send you files until it expires. If a QR leaks, or at the end of each day, hit New QR — the old code dies instantly. Add a spoken password on busy days.
Only take what the service needs
Do not ask a customer to send documents “just in case”. Under the DPDP Act you may collect a citizen's document only for the purpose they came to you for, and only for as long as that purpose lasts.
Exports leave the safety net
A downloaded or printed copy is an ordinary file on your disk or a sheet of paper — nothing expires it. The safest export is the one you do not make.
Watermarking stamps your shop and the time onto exports, so a leaked copy is traceable back to this counter. It is off by default, because a stamp across a citizen's document gets uploads rejected by portals that will not accept a marked scan. Turn it on in Settings → Handling if you print copies that leave the shop.
Use the checklist instead of asking for everything
“Ask for” pushes a named list to the customer's phone and ticks itself off as each file arrives. It is faster than coaching someone across a counter, and it makes the minimum you actually need explicit — to them and to you. Do not pad the list.
Chat is not a record
Messages live with the visit and are erased with it. Use them for “retake this one”, not for anything you would need later. Never type a customer's Aadhaar number, account number or OTP into the box.
Turn on persistent storage
In Settings, request persistent storage once per machine. Without it the browser may evict a customer's documents mid-visit when the disk fills — which looks like your shop losing their paperwork, not like a privacy feature.
Auto-enhance changes the document
Auto-enhance and scan mode rewrite the image. That is usually what a portal wants, but the result is no longer a faithful photograph of what the citizen handed you. Use Revert if a reviewer needs to see the original, and leave auto-enhance off by default if your work is ever audited.
If this computer is lost, stolen or sold
Clear this site's browser data before the machine leaves your hands. Anything still inside its expiry window is readable by whoever has the machine. There is no remote wipe, because there is no server copy to wipe from.