STI Alerts privacy policy
Effective date: November 9, 2026
STI Alerts is published by ShadowTrace Investigations (STI). The app shows open-source (OSINT) threat alerts.
What we collect
The app has no accounts, no sign-in, no forms, no payments, no advertising and no tracking SDKs. We do not sell or share personal data. We use Cloudflare Web Analytics to count visits, as described under “Visitor analytics” below. The only other data our server keeps is described under “Rate limiting” below.
Visitor analytics
STI Alerts uses Cloudflare Web Analytics, a privacy-focused service from our web host. It sets no cookies, does not use fingerprinting, and reports only aggregate counts such as page views, visits, referrers, country, and browser and device type. STI does not use it to identify visitors and does not sell or share this data.
Data stored on your device
To work offline, the app keeps a copy of its own files and the latest alert list in your device's browser/app storage. That copy stays on your device and is never sent to us. You can clear it by uninstalling the app or clearing site data.
Rate limiting
To limit abuse of the alert sign-up, our server keeps a one-way hash of your IP address together with a 10-minute time window for up to 20 minutes, then it is deleted automatically. The raw IP address is not stored and the hash is not used for anything else.
Hosting and links
Alert data is loaded from our web host, which may keep standard server logs (for example IP address and time of request) as part of normal operation. If you tap a link to X, Facebook, LinkedIn, Substack, your phone dialer or your email app, that service's own privacy policy applies.
Children
The app is not directed at children under 13.