The Daily File

So that we won't say we didn't know

Privacy Policy

Last updated: November 4, 2026

The Daily File ("The Daily File", "we", "us") is an independent, volunteer-run documentation project. This policy explains what personal information we collect when you use thedailyfile.org and The Daily File mobile app (together, the "Service"), why we collect it, and the choices you have.

We collect as little as we can. We do not sell personal information, we do not show advertising, and we do not use tracking or analytics tools. Readers do not need an account to use the Service.

1. Information we collect

Information you give us

  • Contact form. Your name, email address, phone number (optional) and message.

  • Article submissions. Your name, email address, phone number, the article title, an optional short synopsis and the file you upload.

  • Newsletter. Your email address, so we can send you updates. Our email provider, Brevo, may record whether emails are opened and which links are clicked. You can unsubscribe at any time using the link in any email.

  • Contributor submissions. Whatever you choose to submit, such as reports, testimonies, photos and video.

  • Search. When you search the Service, your search terms are sent to our server to run the search.

Contributor and staff accounts

Only invited contributors and staff have accounts. For these accounts we store your email address, your password (as a salted hash, never in readable form), one-time sign-in codes we email you (also stored as hashes), an optional biometric unlock key if you turn it on (the private key never leaves your device), and a list of your signed-in sessions and devices.

Information collected automatically

  • Server logs. Like most websites, our servers record technical data such as your IP address, browser type, device type, pages requested and the date and time of each request. We use this only to run, secure and troubleshoot the Service, and we keep it for a limited period.

  • Cookies and local storage. We use only what the Service needs to work, for example remembering your language choice and keeping staff and contributors signed in. We do not use advertising or tracking cookies. If we add a privacy-friendly analytics tool in the future, it will not use cookies or identify individual visitors, and we will update this policy before doing so.

Mobile app

  • Push notifications. If you allow notifications, the app sends us a push token, a random install ID created by the app (not a hardware or device ID), your language and notification topic preferences, your notification permission status, your platform (iOS or Android) and the app version.

  • Crash reports. If the app crashes or hits an error, it sends a crash report to Sentry, our EU-hosted crash reporting provider. Reports include error details, device model, operating system and app version. They do not include your name, email address, user ID or IP address, and sensitive fields are removed before sending.

  • On your device. The app keeps your settings (language, notification topics and install ID) and, for signed-in staff and contributors, the login session in secure storage. It does not store content for offline use.

  • The app does not collect your location or advertising ID, and does not track you.

2. How we use information

We use personal information only to:

  • answer your messages;

  • send the newsletter you signed up for;

  • send the push notifications you choose to receive;

  • run searches;

  • manage contributor and staff accounts, and review, edit and publish submitted material;

  • run, protect and improve the Service, including fixing crashes and preventing spam and abuse;

  • meet legal obligations.

3. Contributors and sources

We take the safety of contributors and sources seriously. We do not publish a contributor's name or identifying details without their consent. We remove location (GPS) data and other embedded metadata from every photo and video uploaded to the Service. If you are submitting material and have concerns about your safety, contact us before you submit.

4. People named in our documentation

The Daily File documents events in the West Bank, Gaza, Israel and the region, including the names and details of people who were killed, wounded or otherwise affected (for example, in our Forcibly Involved project). We publish this information in the public interest and for the purposes of journalism, documentation and historical record.

If you are named in our documentation, or you are a family member of someone who is, and you believe information is wrong or should not be published, please contact us at app.support@thedailyfile.org.

5. Who we share information with

We do not sell or rent personal information. We share it only with:

  • Service providers who help us run the Service:

    • Hetzner (website and app hosting, Finland);

    • Expo (app updates and push notifications);

    • Apple and Google (push notification delivery);

    • Sentry (crash reports, EU-hosted);

    • Brevo (email delivery, France);

    • Anthropic (AI translation of content, used only by our editors).

  • Authorities, only where we are legally required to and after considering the risk to the people involved.

6. Embedded content and external links

Some pages include videos embedded from YouTube and Vimeo, and links to social networks (Bluesky, Facebook, Telegram, X) and partner projects. When you play an embedded video or follow a link, those services may collect information about you under their own privacy policies. We are not responsible for their practices.

7. Where your data is stored

Our servers and storage are located in Finland, in the European Union. Some service providers, such as Apple, Google, Expo, YouTube, Vimeo and Anthropic, may process data outside the EU, including in the United States. Where this happens, they rely on recognised safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.

8. How long we keep information

  • Contact messages: as long as needed to respond to your request, then deleted.

  • Newsletter: until you unsubscribe.

  • Contributor and staff accounts: while the account is active, and for a reasonable period after.

  • Server logs: only as long as needed for security and troubleshooting, then deleted.

  • Crash reports: only as long as needed to fix the problem.

Published documentation may be kept permanently as part of the public record, subject to section 4.

9. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted connections (HTTPS), salted and hashed passwords and sign-in codes, and restricted access to our systems. No system is completely secure, so we cannot guarantee absolute security.

10. Your rights

Depending on where you live (including under Israel's Protection of Privacy Law and the EU General Data Protection Regulation), you may have the right to:

  • access the personal information we hold about you;

  • correct inaccurate information;

  • ask us to delete your information;

  • object to or restrict certain uses;

  • withdraw consent at any time, such as by unsubscribing from the newsletter or turning off notifications.

To make a request, contact us using the details below. You may also complain to your local data protection authority, such as Israel's Privacy Protection Authority or the supervisory authority in your EU country.

11. Children

The Service is not directed at children under 16, and we do not knowingly collect their personal information through forms or accounts. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and change the "Last updated" date.

13. Contact us

Questions or requests about this policy: