Account Information: When you create an account, we collect your email address. We use magic link authentication — we do not store passwords.
Payment Information: The Service is currently free. No payment information is collected.
Usage Data: We collect anonymized analytics data via PostHog, including pages visited, features used, and session duration. This data helps us improve the Service.
We use your information to: (a) provide and maintain your access to the Service; (b) process subscription payments; (c) send transactional emails (login links, payment confirmations); (d) improve the Service based on usage patterns; (e) communicate important updates about the Service.
Your account data is stored in Supabase (hosted on AWS infrastructure). Data is encrypted in transit (TLS) and at rest. Our servers are located in the United States and Europe.
We use the following third-party services that may process your data:
• Supabase — Database (supabase.com)
• Resend — Transactional emails (resend.com)
• PostHog — Analytics (posthog.com, EU servers)
• Netlify — Hosting (netlify.com)
• Reddit Ads — Conversion tracking pixel
Each service operates under its own privacy policy. We recommend reviewing their policies.
We use minimal cookies: PostHog analytics cookies for anonymous usage tracking, and a Reddit advertising pixel for conversion measurement. No personal data is shared with advertisers. You can disable cookies in your browser settings.
We use Google Gemini AI to process publicly available content (news headlines, social media posts, and event photos) for the purposes of: event classification, text translation and summarization, photo-based geolocation estimation, and report generation. The text and images sent to Gemini are sourced from public channels — your personal account data (email, subscription status) is never sent to Gemini. Google's Gemini API data usage policy applies to content processed through their service. AI-generated outputs may contain errors and should not be relied upon as factual.
We do not sell, rent, or trade your personal information to third parties. We may share data only: (a) with service providers necessary to operate the Service (listed above, including Google Gemini for AI processing); (b) if required by law or legal process; (c) to protect our rights or safety.
We retain your account data for as long as your subscription is active, plus 90 days after cancellation. After this period, your personal data is deleted. Anonymized analytics data may be retained indefinitely.
You have the right to: (a) access your personal data; (b) request correction of inaccurate data; (c) request deletion of your data; (d) export your data; (e) withdraw consent for marketing communications. To exercise these rights, contact us at privacy@middleastracker.com.
For users in the European Economic Area (EEA), we process data under the legal basis of contract performance (subscription service) and legitimate interest (analytics). Our analytics provider (PostHog) is hosted on EU servers.
The Service is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance.
For privacy-related inquiries: privacy@middleastracker.com