Privacy Policy

1. Introduction

Iran Crisis Monitor ("we," "our," or "the Service") is committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other international privacy regulations. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

2. Legal Basis (GDPR)

• Legitimate Interest (Art. 6(1)(f)): To provide and improve the Service
• Consent (Art. 6(1)(a)): For optional features
• Legal Obligation (Art. 6(1)(c)): To comply with law

3. Information We Collect

3.1 Automatically Collected

• Browser type and version
• Operating system
• IP address (anonymized)
• Pages visited and time spent
• Referring website
• Device type

3.2 User Provided

AI chat queries (temporary, deleted after session).

4. How We Use Your Data

• Provide and maintain the Service
• Improve user experience
• Analyze usage patterns
• Detect technical issues
• Comply with legal obligations

5. Third-Party Data Sources

We aggregate exclusively publicly available information:

• Government: US State Dept, UK FCDO, Canadian Travel Advisories
• Aviation: FlightRadar24, OpenSky Network (public ADS-B data)
• Financial: Yahoo Finance, Binance (public market prices)
• News: Reuters, BBC, CNN, Times of Israel (public RSS)
• Social Media: Twitter/X API (public posts only)

We do NOT collect classified, confidential, or restricted data.

6. Cookies

Essential cookies only:

• Notification preferences
• Timezone settings
• Session state
• Performance caching

No advertising/tracking cookies.

7. Data Retention

Analytics data: 30 days maximum. Chat data: Deleted after session. We do not sell your data.

8. Security

• HTTPS encryption
• AES-256 data encryption
• Regular security audits
• DDoS protection

9. Your Rights (GDPR)

• Access: Request your data
• Rectification: Correct inaccurate data
• Erasure: Delete your data
• Portability: Transfer your data
• Object: Object to processing

10. Children's Privacy

Not intended for children under 16. No knowingly collected data from children.

11. Contact