infostoa Privacy Policy

1. Current Operations & Absence of User Registration

The portal currently operates without user registration, authentication, or account profiles. Browsing content across infostoa is completely open and requires no personal credentials or account identification.

2. Inquiry Processing via Public Email

When users contact our public inquiry channel (gikri@infostoa.com) for editorial corrections, privacy requests, or general inquiries, the following data is processed:

• Processed Items: Sender email address, inquiry subject, message body, and voluntary attachments.
• Purpose: Verification of inquiry details, answering inquiries, and fulfilling rights requests.
• Retention & Deletion: Once the inquiry is addressed, unnecessary personal data is promptly deleted without delay. We do not apply arbitrary long-term retention.
• Statutory Exceptions: Where retention is mandated by law, records will be archived separately for the required statutory period with explicit notice.
• Infrastructure: Inquiries are received and processed via Google Mail (Gmail) infrastructure, managed independently from planned Google advertising.

3. Cookie-Free Aggregated Analytics (30-Day Cleanup Cycle)

We do not set user-tracking cookies or persistent browser storage identifiers. To understand content performance and accessibility, we collect minimal first-party statistics:

• Per-Visit Temporary Identifier: We generate a temporary identifier for each visit. It is not stored permanently in the browser, but is kept in our server statistics database during the retention window.
• Additional Analytics Fields: The connecting network’s country code and an automation-signal classification are added to the existing temporary pageview record, from the time and subject to the limits explained in the notice above.
• Recorded Metric Items: Visited path (including language code), referrer domain hostname, campaign identifier (when formatted UTM tags exist), device classification (desktop, mobile, etc.), active reading time, and recording/updating timestamps.
• No IP or Search Queries: User search query strings and IP addresses are never recorded in our statistics database.
• Infrastructure Network Data: The site is distributed via Cloudflare edge infrastructure. Standard network transmission logs, including connecting IP addresses, may be processed at the infrastructure layer for DDoS mitigation and network security.
• 30-Day Cleanup: An hourly scheduled job deletes analytics records older than 30 days. Job or database failures can delay deletion. Administrative queries cover only the latest 7 or 30 days.
• Honoring Privacy Signals: Analytics transmissions halt immediately whenever browser Do Not Track (DNT) or Global Privacy Control (GPC) signals are detected.

4. Local Management Notice

Administrative features are restricted to authorized administrators. Article content saved by an administrator is transmitted to and stored in the service’s Cloudflare D1 database; temporary editing copies may also be retained in the browser. The analytics dashboard displays server-aggregated summary counts.

5. Planned Future Services (Member Accounts & Subscriptions)

infostoa plans to introduce user account login and updates subscriptions in the future, but currently does not collect personal data for membership or subscription purposes. Reading this policy does not constitute consent to data collection.

• Planned Data Items: Account email and authentication credentials for member accounts; mobile telephone numbers strictly for explicit SMS alert applicants.
• Separated Consent Structure: When launched, separate explicit consent will be obtained for Terms of Service, mandatory account data, optional email marketing, and optional SMS marketing.
• No Pre-Checked Boxes & Guaranteed Public Access: Optional marketing checkboxes will never be pre-selected. Declining consent will not restrict access to public content.
• Withdrawal & Unsubscribe: Subscribers will be able to cancel or withdraw consent at any time via unsubscribe links in messages.
• Prior Notice: Full details on retention periods, processors, and any cross-border transfers will be announced prior to launch. No paid subscriptions or payment systems are active.

7. Data Subject Rights & Contact Channels

Users have the right to request access, correction, erasure, restriction of processing, or withdrawal of consent regarding their personal data. Requests can be submitted directly to our contact email (gikri@infostoa.com) and will be handled without delay in compliance with applicable regulations. (Service Inquiries: infostoa)

8. Security Management & Destruction Principles

• Destruction Procedure: Personal data whose purpose has been fulfilled or retention period has expired is promptly and safely deleted.
• Security Principles: We limit access privileges to minimal necessary staff, implement appropriate access controls, and maintain reasonable safeguards to protect user information.

9. Amendments & Effective Date

Any revisions to this policy will be announced via website notice at least 7 days prior to taking effect. The original policy applied from September 21, 2026. This launch-preparation analytics update applies from actual publication of the notice above; new collection starts after publication is verified and the feature is enabled.