Privacy Policy

Overview

HantaOSINT is operated as an independent open-source intelligence platform. This page explains in plain English what data we collect, why we collect it, and what we do with it. We have written this in the spirit of GDPR and CCPA, regardless of where you are reading from.

Short version: we collect the minimum data needed to run a public dashboard and a paid API. We do not sell your data. We do not use behavioural advertising. We do not run analytics that profile you across the web.

Who we are

HantaOSINT is operated by an independent surveillance team. Technical infrastructure is developed and maintained by Tileterra Systems and search performance is optimized by Websiteaiscore. Editorial and operational decisions are made by the HantaOSINT team independently.

For all privacy-related queries, contact contact@hantaosint.com.

What we collect

Public dashboard visitors

When you visit hantaosint.com without logging in or subscribing, we collect:

Server access logs from Cloudflare (IP address, user agent, request URL, timestamp). These are kept for 30 days and used only to detect abuse and debug performance.
No cookies are set. No browser fingerprinting is performed. No third-party trackers run.

Newsletter or Telegram alert subscribers

If you join our Telegram channel, that relationship is governed by Telegram's privacy policy. We do not import, export, or analyze your Telegram identity beyond confirming channel membership for paid-tier features.

If you provide an email for newsletter signups, we store: email address, subscription date, and opt-in confirmation. We use a privacy-respecting email provider and do not share your address.

Paid tier users (Pro and Enterprise)

If you subscribe to the Pro or Enterprise tier, we additionally collect:

Name and email for account management
Billing information processed by our payment provider (Stripe). We do not store full card numbers.
API request logs (which endpoints you hit, when, how often) — used to enforce rate limits and bill correctly
Optional: organization name if you supply one for invoicing

Legal basis (GDPR)

Where you are an EU or UK resident, we rely on the following legal bases:

Legitimate interest for server access logs and abuse prevention
Contract for processing necessary to provide a paid API service
Consent for newsletter signup and Telegram channel membership

How we use your data

To operate the dashboard and serve pages
To deliver alerts you have subscribed to
To bill paid subscribers and enforce API limits
To detect and respond to abuse, scraping, or denial-of-service attempts
To respond to legitimate legal requests where required by law

We do not use your data for behavioural advertising, profiling, or sale to third parties under any circumstances.

We share data only with the following processors, each acting under a data processing agreement:

Cloudflare — content delivery, DDoS protection, edge caching
Stripe — payment processing for paid tiers
Email service provider — newsletter delivery (we use a GDPR-compliant European provider)

None of these are advertising companies. None of them resell your data. None of them perform profiling on our behalf.

Cookies and similar technologies

The public dashboard does not set any cookies. The paid-tier login area sets a single session cookie required to keep you logged in. No analytics cookies, no advertising cookies, no third-party cookies are set anywhere on this site.

Your rights

You have the following rights with respect to your personal data:

Right to access — request a copy of what we hold
Right to rectification — correct inaccurate data
Right to erasure — request deletion (the right to be forgotten)
Right to data portability — receive your data in a machine-readable format
Right to object — opt out of any processing based on legitimate interest
Right to withdraw consent — at any time, with no consequence

To exercise any of these rights, email contact@hantaosint.com. We respond within 30 days.

Data retention

Server access logs: 30 days
Newsletter subscriptions: until you unsubscribe
Paid account records: duration of subscription plus 7 years for tax/audit compliance
API logs: 90 days for active accounts, deleted within 30 days of cancellation

Security

We use industry-standard security: HTTPS everywhere, encrypted storage, access control on all administrative systems, and regular security review. No system is perfectly secure, but we take this responsibility seriously. If you identify a security issue, please email contact@hantaosint.com with details.

Children

HantaOSINT is intended for adult professional and general audiences. We do not knowingly collect data from anyone under 16. If you believe a child has subscribed, contact us and we will delete the record.

International transfers

Cloudflare, our content delivery provider, operates globally. Data may be processed at the nearest edge node to a visitor. Where personal data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses or equivalent safeguards.

Changes to this policy

We will update this page when our practices change. The effective date at the top reflects the latest version. We will notify paid subscribers by email of material changes.

Contact

For privacy questions, data subject requests, or anything else covered by this policy:

Email: contact@hantaosint.com
Mailing address: available on request to verified data subjects