STI Alerts privacy policy
Effective date: October 22, 2026
STI Alerts is published by ShadowTrace Investigations (STI). The app shows open-source (OSINT) threat alerts.
What we collect
The app has no accounts, no sign-in, no forms, no payments, no advertising and no tracking SDKs. We do not sell or share personal data. We use Cloudflare Web Analytics to count visits, as described under “Visitor analytics” below. The only other data our server keeps is described under “Rate limiting” below.
Visitor analytics
To understand how many people use STI Alerts, we use Cloudflare Web Analytics, a privacy-focused service from our web host. It uses no cookies, does not track you across other websites, and does not build a profile of you. It records basic visit information such as the page viewed, the referring site, browser and device type, country, and page load speed. We see only totals, not individual visitors.
Data stored on your device
To work offline, the app keeps a copy of its own files and the latest alert list in your device's browser/app storage. That copy stays on your device and is never sent to us. You can clear it by uninstalling the app or clearing site data.
Rate limiting
To limit abuse of the alert sign-up, our server keeps a one-way hash of your IP address together with a 10-minute time window for up to 20 minutes, then it is deleted automatically. The raw IP address is not stored and the hash is not used for anything else.
Hosting and links
Alert data is loaded from our web host, which may keep standard server logs (for example IP address and time of request) as part of normal operation. If you tap a link to X, Facebook, LinkedIn, Substack, your phone dialer or your email app, that service's own privacy policy applies.
Children
The app is not directed at children under 13.