Privacy Policy
How we handle your data — in plain language.
This page is maintained by the OSINT R. team to explain how the OSINT R. website handles your information. It is a plain-language summary of our current practices, not a legal certification. If you need contractual terms, contact us at https://rokibulroni.com/inv/.
Who we are
OSINT R. ("we", "our") operates the website and publishes an index of open-source intelligence tools, articles, and cheatsheets. This policy covers information collected through that website.
What we collect
We aim to collect as little as possible.
| Category | What it is | Why we have it |
|---|---|---|
| Account data | Email, display name, hashed password (if you register) | To let you save collections and submit tools |
| Submissions | Content you post through forms (tool suggestions, comments) | To publish and moderate the index |
| Usage data | Coarse analytics (pages viewed, referrer, country) | To improve the site |
| Technical logs | IP address, user-agent, timestamps | Security, abuse prevention, debugging |
We do not knowingly collect data from children under 16, and we do not sell personal information.
Cookies and analytics
We use a small number of cookies:
- Essential cookies for session management and CSRF protection.
- Preference cookies (e.g. theme, saved layouts).
- Analytics cookies to measure aggregate usage. You can disable these in your browser or via our cookie banner without breaking the site.
How long we keep data
- Account data: until you delete your account.
- Submissions: retained as part of the public record; you may request removal.
- Logs: 30 days, then aggregated.
- Analytics: 12 months.
Subprocessors
We use a small set of standard service providers to run the site — hosting, email delivery, and analytics. A current list is available on request. We do not share personal data with third parties for advertising.
Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion.
- Object to certain processing.
- Lodge a complaint with your local data protection authority.
To exercise any of these, contact https://rokibulroni.com/inv/. We respond within 30 days.
Security
We use HTTPS everywhere, hash passwords with a modern algorithm, and keep secrets in a managed store. No system is perfectly secure — if you find a vulnerability, please contact https://rokibulroni.com/inv/.
Changes
We update this policy when our practices change. Material changes are announced on the site and via email to registered users. The current version is dated at the top of this page.
Last updated: July 8, 2026.