Privacy Policy

Effective date: 18 August 2026

Iran Dossier is published by Acumen Risk LTD, a company registered in Israel (company number 515910933), which is the data controller for this site. We collect as little personal data as a publication can: there are no reader accounts, no advertising, and no analytics or tracking scripts.

1. What we collect, and why

Reading the site

Reading Iran Dossier requires no registration. We run no analytics and set no cookies for reading. The site is served through Cloudflare, whose infrastructure processes standard technical data (IP address, user agent, requested pages) in short-lived server logs for security and delivery; we do not use this data to profile readers. Your light/dark theme choice, if you set one, is stored only in your own browser (localStorage) and is never transmitted to us. Fonts are self-hosted; nothing is loaded from Google Fonts.

Embedded videos

Some posts embed videos using YouTube's privacy-enhanced player (youtube-nocookie.com). No data flows to YouTube until you press play; from that point Google's privacy policy applies.

Contacting us

If you email us, we receive your address and whatever you write. We use it to reply and keep the correspondence for as long as it stays relevant.

Purchases

Paid access is sold by Paddle, our merchant of record. Paddle collects the data needed to process the order (name, email address, billing country, payment details) under its own privacy policy; we never see your full payment details. Paddle passes us your email address and transaction details, which we use to deliver access links and service emails about your purchase (receipts, new extended editions you are entitled to, cancellation confirmations). We send no marketing email and operate no newsletter. Delivering paid access may require a strictly necessary cookie or signed access link; neither is used for tracking.

2. What we do not do

We do not sell or rent personal data, run third-party advertising, use analytics or fingerprinting, or share reader data with anyone except the processors below.

3. Processors and recipients

Cloudflare, Inc. (hosting and content delivery), Paddle (merchant of record for payments), and our transactional email provider (delivery of access emails). Each processes data only to provide its service. These providers operate globally; transfers outside your country rely on their standard contractual safeguards.

4. Retention

Correspondence is kept while relevant. Purchase and entitlement records are kept for the life of your access and thereafter as required for tax and accounting law. Cloudflare's edge logs are short-lived and managed by Cloudflare.

5. Your rights

Depending on where you live (including under the EU/UK GDPR and Israel's Privacy Protection Law), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, and to complain to your data protection authority. To exercise any of these rights, reach us through the contact page; we respond within 30 days. For data held by Paddle, requests can also be made to Paddle directly.

6. Changes

We may update this policy from time to time; the effective date above reflects the latest revision. Material changes affecting paying subscribers will be announced by email.

7. Contact

Privacy questions: reach us through the contact page.

See also our Terms of Service and Refund Policy.