🔒 privacy_policy.txt — Last updated: July 27, 2026

✕

This privacy policy applies to crimsh.com and the Cyber Index UA application, which uses the Meta Graph API and the Threads API to publish automated cybersecurity reports and news.

● NO TRACKING no cookies no data stored

policy_sections.dat

✕

1. About the Application

Cyber Index UA is an automated system that generates and publishes cybersecurity threat reports and news for Ukraine. Content is published to Facebook @cyberindexua using the Meta Graph API, to Threads @cyberindexua using the Threads API, and to the Telegram channel @cyberindexua. All posts are made to accounts we own. No user interaction is involved.

2. Data We Collect

We do not collect any personal data from visitors or users. The application does not:

Collect, store, or process personal information of any users
Use cookies for tracking purposes
Request access to any other user’s Facebook, Threads, or Telegram profile
Store authentication tokens beyond API operation requirements
Share any data with third parties

3. Use of Meta APIs

The application uses the following permissions exclusively to publish its own content to its own accounts:

Meta Graph API (Facebook):

pages_manage_posts — to publish photo posts to the Facebook Page
pages_read_engagement — required by Meta for page management

Threads API:

threads_basic — required baseline access to the Threads account
threads_content_publish — to publish posts to the Threads profile

No user data is accessed, read, or stored through these permissions. The application does not read timelines, followers, comments, or messages, and does not post on behalf of anyone other than its own accounts.

Publishing to Instagram was discontinued in July 2026; the application no longer uses Instagram permissions.

4. Data Sources

Report content is generated from publicly available cybersecurity feeds: CERT-UA, ThreatFox, URLhaus, CISA KEV, NVD CVE, Ransomware.live, and IODA. All data sources are public and do not contain personal information.

5. Third-Party Services

This website is served by Cloudflare Pages. Cloudflare may collect standard web server logs (IP addresses, access times, user agent) as part of delivering and protecting the site. See Cloudflare’s Privacy Policy.

The site source is stored in a private repository on GitHub, which is not accessible to visitors. See GitHub’s Privacy Statement.

6. Data Deletion

Since we do not collect or store any personal data, there is no user data to delete. If you believe we hold data about you, contact us using the link below and we will confirm and act within 30 days.

The owner of the connected accounts can revoke this application’s API access at any time:

Facebook: Settings & Privacy → Settings → Apps and Websites
Threads: Settings → Account → Website permissions

Revoking access immediately invalidates the tokens used by the application and stops all automated publishing.

7. Contact

Questions? Use the contact page.

terminal.exe

✕

C:\crimsh> privacy --status

data_collected: NONE

cookies_used: NONE

tracking: NONE

law_enforcement: WARRANT REQUIRED

C:\crimsh>