Policy

Privacy Policy

This policy explains how ISOM handles visitor analytics, public paper-link submissions, and admin sessions. It is written to match the current behavior of this deployment.

Effective Date 2026-03-16 Last Updated 2026-03-16

1. Scope

ISOM is a research content service. This deployment provides public browsing, public paper-link submission for admin review, and administrator-only publishing tools.

2. Data We Collect

A random visitor cookie used to distinguish repeat visits for analytics.
Viewed page path, content slug or title, language, and timestamp when a public page is opened.
Client IP address for analytics, except excluded operational IPs.
Approximate country, region, city, and network organization for public IP addresses when geo lookup succeeds.
Paper-link submission data: submitted URL, normalized URL, source host, and a hashed submitter fingerprint for abuse prevention.
Admin session cookie for authenticated administrator pages.

3. Why We Use Data

To count visits, unique visitors, and today's traffic in the admin dashboard.
To understand which public posts are being viewed.
To review public paper-link submissions and limit abuse or automated spam.
To maintain administrator login sessions.

4. IP Addresses and Geo Data

Public IP addresses may be resolved to approximate location information. Internal or private-network IP addresses cannot be geolocated reliably and may be shown as internal network traffic.

Excluded operational IPs are not counted in analytics.
Geo lookup is attempted only for non-private IP addresses.
Approximate location data is used for admin statistics only and is not shown publicly.

5. Cookies and Sessions

A visitor analytics cookie may be stored to measure unique visitors over time.
An admin session cookie is stored only after successful administrator authentication.
If you block cookies, some analytics counts may be less accurate and admin login may not work.

6. Retention and Security

Analytics records and paper-link submission records are stored in the service database until they are deleted by the operator or are no longer needed for operation.
Admin session data is stored for session continuity and expires according to browser or server settings.
Access to admin pages is restricted by an administrator access code and session checks.

7. Sharing and External Services

ISOM does not sell visitor data.
For public IP geolocation, this deployment may send the IP address to ipwho.is over HTTPS.
Paper links submitted for review may later be fetched by the service when an administrator verifies or approves the link.

8. Your Choices and Policy Updates

You can limit cookies through your browser settings.
Do not submit paper links that contain credentials, private endpoints, or personal information.
This policy may be updated when analytics, moderation, or admin features change.