Privacy Policy

Last updated: 24 August 2026

This Privacy Policy explains how GEOSTRAT (“GEOSTRAT”, “we”, “us”) collects, uses and protects information when you use our website, blog and the GEOSTRAT monitoring console (together, the “Service”), available at geostrat.cc. We are based in Italy and aim to handle personal data in line with the EU General Data Protection Regulation (GDPR).

1. Information we collect

• Account information — when you create an operator account you provide a username (callsign), an email address, and a passphrase. Passphrases are never stored in plain text; they are salted and hashed.
• Authentication & usage data — a secure session cookie keeps you signed in. We keep limited technical logs (such as IP address, timestamps and request paths) to operate the Service, prevent abuse and apply rate limits.
• Communications — if you contact us or subscribe to updates, we process the information you send (for example your email address and message).

2. How we use your information

We use personal data to: provide and secure the Service; authenticate you and maintain your session; send transactional emails such as email-verification and password-reset codes; respond to enquiries; and detect, prevent and investigate abuse or security incidents. Our legal bases are performance of a contract (providing the Service you request), our legitimate interests (security and improvement), and your consent where required.

3. Cookies

We use a single essential cookie to keep you logged in to the console. We do not use third-party advertising or cross-site tracking cookies. If you would like to remember a light/dark theme preference, that is stored locally in your browser and is not sent to us.

4. Third-party data and services

The console aggregates and displays information from independent public and third-party sources (for example news wires, open-source intelligence, government and scientific feeds, and mapping data). Those sources are operated by third parties and are subject to their own terms and privacy practices. We also rely on service providers to run GEOSTRAT, including a cloud host and a transactional email provider; they process data only to provide their services to us.

5. Sharing of information

We do not sell your personal data. We share personal data only with the service providers described above, or where we are required to do so by law, or to protect the rights, safety and security of GEOSTRAT, our users or the public.

6. Data retention

We keep account data for as long as your account is active. If you delete your account, or ask us to delete your data, we remove your personal data except where we must retain limited records to comply with legal obligations or resolve disputes.

7. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and request a copy of the data you provided. You can exercise these rights, or ask any privacy question, via our Contact page. You also have the right to lodge a complaint with your local data-protection authority.

8. Security

We protect the Service with HTTPS encryption in transit, salted-and-hashed passphrases, session-based authentication and rate limiting. No method of transmission or storage is completely secure, but we work to protect your information using reasonable technical and organisational measures.

9. Children

The Service is not directed to children and is intended for users aged 16 and over. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest revision. Material changes will be posted on this page.

11. Contact

For any privacy request or question, please reach us through our Contact page.