infostoa Privacy Policy

1. Current Operations & Absence of User Registration

The portal currently operates without user registration, authentication, or account profiles. Browsing content across infostoa is completely open and requires no personal credentials or account identification.

2. Inquiry Processing via Public Email

When users contact our public inquiry channel (gikridev@gmail.com) for editorial corrections, privacy requests, or general inquiries, the following data is processed:

• Processed Items: Sender email address, inquiry subject, message body, and voluntary attachments.
• Purpose: Verification of inquiry details, answering inquiries, and fulfilling rights requests.
• Retention & Deletion: Once the inquiry is addressed, unnecessary personal data is promptly deleted without delay. We do not apply arbitrary long-term retention.
• Statutory Exceptions: Where retention is mandated by law, records will be archived separately for the required statutory period with explicit notice.
• Infrastructure: Inquiries are received and processed via Google Mail (Gmail) infrastructure, managed independently from planned Google advertising.

3. Cookie-Free Aggregated Analytics (30-Day Cleanup Cycle)

We do not set user-tracking cookies or persistent browser storage identifiers. To understand content performance and accessibility, we collect minimal first-party statistics:

• Per-Visit Temporary Identifier: We generate a temporary identifier for each visit. It is not stored permanently in the browser, but is kept in our server statistics database during the retention window.
• Recorded Metric Items: Visited path (including language code), referrer domain hostname, campaign identifier (when formatted UTM tags exist), device classification (desktop, mobile, etc.), active reading time, and recording/updating timestamps.
• No IP or Search Queries: User search query strings and IP addresses are never recorded in our statistics database.
• Infrastructure Network Data: The site is distributed via Cloudflare edge infrastructure. Standard network transmission logs, including connecting IP addresses, may be processed at the infrastructure layer for DDoS mitigation and network security.
• 30-Day Cleanup Cycle: Data older than 30 days is cleaned up when subsequent visit requests occur. Deletion may be delayed during periods without visits.
• Honoring Privacy Signals: Analytics transmissions halt immediately whenever browser Do Not Track (DNT) or Global Privacy Control (GPC) signals are detected.

4. Local Management Notice

Draft article edits under /admin/ are stored exclusively in your local browser localStorage and are never sent to external servers. The administrative dashboard displays aggregated summary counts retrieved from the server without exposing individual user data.

5. Planned Future Services (Member Accounts & Subscriptions)

infostoa plans to introduce user account login and updates subscriptions in the future, but currently does not collect personal data for membership or subscription purposes. Reading this policy does not constitute consent to data collection.

• Planned Data Items: Account email and authentication credentials for member accounts; mobile telephone numbers strictly for explicit SMS alert applicants.
• Separated Consent Structure: When launched, separate explicit consent will be obtained for Terms of Service, mandatory account data, optional email marketing, and optional SMS marketing.
• No Pre-Checked Boxes & Guaranteed Public Access: Optional marketing checkboxes will never be pre-selected. Declining consent will not restrict access to public content.
• Withdrawal & Unsubscribe: Subscribers will be able to cancel or withdraw consent at any time via unsubscribe links in messages.
• Prior Notice: Full details on retention periods, processors, and any cross-border transfers will be announced prior to launch. No paid subscriptions or payment systems are active.

7. Data Subject Rights & Contact Channels

Users have the right to request access, correction, erasure, restriction of processing, or withdrawal of consent regarding their personal data. Requests can be submitted directly to our contact email (gikridev@gmail.com) and will be handled without delay in compliance with applicable regulations. (Service Inquiries: infostoa)

8. Security Management & Destruction Principles

• Destruction Procedure: Personal data whose purpose has been fulfilled or retention period has expired is promptly and safely deleted.
• Security Principles: We limit access privileges to minimal necessary staff, implement appropriate access controls, and maintain reasonable safeguards to protect user information.

9. Amendments & Effective Date

Any revisions to this policy will be announced via website notice at least 7 days prior to taking effect. This policy is effective as of September 21, 2026.