Privacy
What personal data FISRO collects, why, and how it is protected.
Reading this website
Reading FISRO does not require an account and does not set tracking or advertising cookies. We do not use third-party analytics, social-media widgets or advertising networks. Our fonts are served from our own servers.
Like any website, our servers and our network provider (Cloudflare) process technical data such as IP addresses to deliver pages and protect the site from abuse. Server logs are kept for a limited period for security and then deleted.
Reporting a threat or contacting us
When you use the report form or contact form, we store what you write and any contact details you choose to give. You can report a threat without giving your name or email.
- Encryption. Your submission is encrypted with a public key the moment it reaches our server. The public website cannot decrypt it; only an authorised reviewer using a separate, restricted system can.
- No attachments. The forms do not accept files.
- Abuse protection. To prevent automated abuse we apply rate limits using a one-way, salted hash of your IP address. We do not store your IP address with your submission. We record only a coarse browser type (for example “Firefox”).
- Access. Only staff whose role requires it can read submissions. Every access to the review system requires multi-factor authentication and is logged.
- Retention. Submissions are deleted 180 days after receipt unless they are part of active work, such as a notification to an operator or an ongoing investigation. Contact messages are deleted once the matter is closed.
- Sharing. We may share technical details of a verified threat — such as a malicious URL — with those able to act on it. We do not share your identity or contact details without your consent unless required by law.
Your rights
You can ask us to tell you what we hold about you, to correct it or to delete it, using the contact form. Quote the reference number you received if you have it. Because submissions are designed to be hard to link to individuals, we may not be able to find a submission without that reference.
Changes
We will update this notice when our practices change, and show the date of the last revision below.