Privacy & terms
fihrist asks daftar who you are, and then holds your name, your email address and your notes. You are entitled to know exactly what happens to all three — and what you agree to by using it.
This page is not finished, and we would rather say so
The full privacy policy and terms are being prepared with our legal advisers, alongside daftar's, so that they hold in the places our members actually are and not only where our servers are. We would rather publish them late and correct than early and vague. Nothing below is waiting on them: it is what is already true today, and the documents will record it rather than reinterpret it.
Privacy — what is already true, today
- We use no tracking cookies, no analytics, no telemetry and no third-party scripts. Not "none that we consider intrusive" — none at all.
- We hold no password for you, because there is no password. daftar signs you in — with a passkey or a link it emails you — and hands fihrist a sealed note, good for sixty seconds and usable once, saying who you are.
- What fihrist keeps about you: your name and email address, the identifier daftar gave you, your role, who added you and when, when you first and last signed in; for each session, when it began, the address and browser it came from, and a cookie so that you stay signed in. Every admission, refusal and administrative act is written to an audit log with the time; sign-ins carry the address they came from.
- A token you make for an assistant is shown to you once. fihrist keeps only its hash and its first eight characters; nobody, including us, can read it back.
- Your notes are yours. They are private unless you share one, and only you can change what you wrote. Ask and we hand them over as plain text.
- Nothing you search for, and no page of the library, leaves our own machines to be read by anyone else's model. The sign-in note and its state are removed from our logs before they are written.
- We do not sell your information, and we do not share it for marketing. There is no marketing. There is no public sign-up and there never will be: every member is on the list because a named admin put them there.
Terms — what you agree to
- 🔴 Nothing fihrist shows you is a quotation. Every word a machine read out of a page is marked not quotable, and it stays that way until a named person has opened the rendered page and read it. Publishing machine-read text from this tool as a source — on a minbar, in a script, in a write-up — is the one thing it is built to prevent, and the one thing we ask you never to do.
- The library is held for the research of the IlmFlow team. It is not for redistribution, and membership may be switched off by an admin at any time; your notes remain yours when it is.
- Your assistant acts under your name and within the scope of the token you gave it. What it files in your notebook is yours; what it does is your act.
- The catalogue's names are decisions: a work's name is vouched for by the person who reviewed it, and the page says so, or says that nobody has yet.
- These commitments were made in person before they were written here. If your understanding differs from what you read above, we want to know, because that is our mistake and not yours.
Ask us anything, now rather than later
If you want to know what we hold about you, or would like it removed, you do not have to wait for a document. Get in touch and a person will answer you.