Privacy Policy
- You can use the map and The Wire without an account. We collect only what we need to run accounts, plans, alerts and security.
- No advertising, no ad trackers, no selling or renting your data.
- Passwords are stored hashed. You can ask us to see, correct or delete your data at any time.
1. Who we are
This policy explains how the operator of WARNPOINT (“we”, “us”) handles personal data when you use WARNPOINT. For privacy questions or requests, contact the contact form.
2. What we collect and why
| Data | When | Why |
|---|---|---|
| Email or username and password | You create an account | To run your account. Passwords are stored only as salted scrypt hashes; we cannot see them. |
| Session cookie | You sign in | Keeps you signed in (HttpOnly, expires after 12 hours). |
| Anonymous usage counter | You use AI or other metered features without an account | Counts free uses so limits work: a cookie holding a random ID, plus a one-way hash of your IP address (we never store the IP itself). Kept for 30 days. |
| Plan and billing records | You subscribe | Plan, status and Stripe customer/subscription IDs. Card details go directly to Stripe; we never see or store them. |
| Saved places and alert rules | You save a place or rule | To alert you about events nearby. If you use your device location, coordinates are rounded to about 1 km before saving; you can instead pick a point on the map. |
| Push notification subscription | You turn on notifications | A delivery address and keys from your browser so we can send alerts. Turning notifications off stops them. |
| AI analyst questions | You ask a question | Sent to our AI service provider to generate the answer; the first 120 characters are logged with your account for security and abuse prevention. |
| Daily brief emails (Plus and Pro) | You have Plus or Pro and the daily brief is on | Your email address is used to send the daily intel brief through our email delivery provider. Every email has a one-click unsubscribe link; you can also turn it off in Alerts. |
| Contact form messages | You write to us | Name, email, message and IP address, to reply and to stop spam. |
| Security and activity logs | Sign-ins and use of account features | Records such as sign-ins, failed sign-ins, sign-ups, dossier views, AI use and account changes, with IP address — to secure the Service, prevent abuse and enforce plan limits. |
| Usage analytics | You visit the site | Google Analytics records pages viewed and features used (for example sign-ups, upgrades, shares and AI questions), device and browser type, and approximate location derived from your IP address, using first-party cookies (_ga, _ga_*). We use it to understand and improve the Service. Advertising features, ad personalisation and data sharing for ads are turned off, and we don’t send your name, email or account ID to Google. |
| Browser storage | You use the map | Your watchlist, alert history and display preferences are kept in your own browser (localStorage), not on our servers. |
Share links store a snapshot of the public item you shared (a headline, incident or threat reading) — not who shared it. We do not use advertising cookies. Apart from Google Analytics (described above), we do not run third-party trackers on the Service. You can block analytics with your browser’s privacy settings or Google’s opt-out add-on without affecting the Service.
3. Legal bases (EEA/UK)
We process data to perform our contract with you (accounts, plans, alerts), for our legitimate interests (security, abuse prevention, improving the Service), with your consent (device location, push notifications — withdraw any time in your browser), and to meet legal obligations (tax and payment records).
4. Who we share data with
We share data only with providers that help us run the Service, under their own privacy and security commitments:
- Hosting — our cloud hosting provider stores and serves the Service.
- Payments — Stripe processes subscriptions and payments.
- AI — an AI service provider processes analyst questions and the related WARNPOINT data to generate answers.
- Email delivery — an email delivery provider sends the daily brief to Plus and Pro members who have it switched on.
- Push delivery — your browser's push service (for example Apple, Google or Mozilla) delivers notifications you enable.
- Analytics — Google Analytics (Google LLC) processes usage data on our behalf as described above.
- Fonts — pages load fonts from Google Fonts, which receives your IP address when fonts are fetched.
- Live TV — channels are embedded from YouTube; when you open the TV panel or play a stream, YouTube may set cookies and collect data under its own policy.
We may also disclose data if required by law, to protect people's safety or our rights, or as part of a merger or sale of the business (the buyer would be bound by this policy). We never sell or rent personal data.
5. Links to other sites
Headlines link to publishers' websites. Once you leave WARNPOINT, their privacy practices apply.
6. How long we keep data
- Account, plan, saved places and alert rules: while your account exists; deleted within 30 days of account deletion, except billing records we must keep for tax law.
- Security and activity logs: kept as long as needed for security and abuse prevention, and no longer than 24 months.
- Contact messages: until handled, and no longer than 24 months.
- Session cookies expire after 12 hours; the anonymous usage counter resets periodically.
7. Security
We use HTTPS, hashed passwords, HttpOnly session cookies and access-restricted administration with audit logging. No system is perfectly secure; if a breach affects your data we will notify you as required by law.
8. Your rights and choices
Depending on where you live (for example under the GDPR, UK GDPR or US state laws such as the CCPA/CPRA), you may have the right to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Contact the contact form and we will respond within 30 days. You can also complain to your local data protection authority. We do not sell or “share” personal data for cross-context behavioural advertising, and we will not discriminate against you for exercising your rights.
Without contacting us, you can: clear your browser storage to remove your local watchlist and alert history; turn off notifications in your browser; deny location access and pick places on the map instead.
9. International transfers
Our providers may process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.
10. Children
WARNPOINT is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.
11. Changes
We will post any changes here and update the effective date; for material changes we will notify account holders in the Service or by email.