Privacy policy

In short

• No advertising and no third-party trackers. Page views are counted per day, in total, without cookies or IP addresses.
• Browsing needs no account. An account needs only an email address.
• Fonts, scripts and styles are served from this site, not from other companies.
• This policy is written to meet the Israeli Privacy Protection Law, 1981, as amended by Amendment 13, and gives the notice required when personal information is collected.

What we collect, why, and whether you must give it

• Email address, when you sign in. Purpose: sending you a sign-in link and keeping your account. You are not obliged by law to give it; without it you cannot sign in, and everything else on the site still works.
• For each signed-in session: the IP address, the browser type and the times of use. Purpose: security, so you and we can see and end sessions.
• When you submit or report a listing: a one-way hash of your IP address. Purpose: enforcing daily limits and stopping abuse. It cannot be turned back into the address.
• Short-lived counters used to limit how fast requests come in. Purpose: protecting the site. Deleted after one day.
• Staff members only: a record of the actions they take in the panel. Purpose: accountability.

Information about Telegram channels and groups

The index is built from what channels and groups publish openly on Telegram: names, descriptions, subscriber counts and the text of public posts. We store text and numbers only, never media. Post text is deleted after a set period.

Messages in public groups are read through the site's own Telegram accounts for analysis. They are never shown on the public site, and who wrote them is never stored.

For specific investigations, the site may also read private chats whose invite link was published, through its own accounts. They are never shown on the public site, and who wrote is never stored.

If you run a channel and want it out of the index, use the report form on its page, verify ownership and hide it yourself, or write to us.

Who receives information

• Hosting and database: our hosting provider, which stores the data on our behalf.
• Email delivery: Resend, which receives your address in order to deliver the sign-in email.
• If you write to us, your message is received through Resend and kept in our inbox until it is handled.
• Network and protection: Cloudflare, which carries requests to the site. If the human check on the submission form is on, it is provided by Cloudflare Turnstile.
• Telegram: channel images are loaded by your browser directly from Telegram's servers, so Telegram receives your IP address.
• Authorities, when the law requires it, and in reports of content that sexually exploits minors.
• We do not sell information and do not share it for advertising.

Transfers outside Israel

The providers above may store or process information outside Israel, including in the European Union and the United States. We use providers that commit to protecting it.

How long we keep things

• Sign-in links: one day.
• Sessions: up to 45 days.
• Rate limiting counters: one day.
• Hashed IP addresses of submissions and reports: as long as the listing exists.
• Account data: until you delete your account.

Your rights

You may ask to see the information we hold about you (section 13 of the law), and ask for it to be corrected or deleted (section 14). Write to the privacy contact above. We answer within 30 days.

You can delete your account at any time from the Account page. You may also complain to the Privacy Protection Authority.

Cookies and local storage

Only cookies the site cannot work without. None is used for tracking.

• gd_s: keeps you signed in.
• gd_csrf: protects forms against forged requests.
• gd_adult: remembers that you confirmed your age for the adults-only area.
• Your theme and accessibility settings are kept in your browser's local storage and never sent to us.

Security

Connections are encrypted. Staff sign in with two-step verification. Secrets and the sessions of the site's Telegram accounts are stored encrypted. Every staff action is logged.

Changes

We will update this page when practices change. The date above shows the last update.