Privacy Policy

1. General Information & Legal Basis

The Yad Kon Registry is dedicated to documenting and preserving the memory of victims of human rights violations in Iran. We hold the privacy of our visitors, administrators, and the families of the victims in the highest regard. This policy outlines how we handle and protect data on this platform.

2. Data Relating to the Deceased

Pursuant to Recital 27 of the European Union General Data Protection Regulation (GDPR), GDPR rules do not apply to deceased individuals. However, we acknowledge that national laws in various jurisdictions protect post-mortem privacy:

Family members and authorized next-of-kin have the right to request corrections, updates, or complete removal of profile records and media of their loved ones at any time. To submit a modification or erasure request, please contact us via email.

3. Visitor Data & Security

We adhere to strict data minimization principles:

• Server Logs: Visitor IP addresses and request metadata are logged temporarily for system health, diagnosis, and security monitoring (under the legal basis of Legitimate Interest). These logs are automatically rotated and deleted after a short retention period.
• Interactive Form Submissions: When you submit a profile correction, write a tribute, ask a question, or light a memorial candle, a one-way cryptographic hash of your IP address — not the IP address itself — is stored in our database. This hash is used solely for anti-abuse rate-limiting and cannot be reversed to recover your original address. The correction report form additionally stores an optional email address if you choose to provide one for follow-up.
• Bot Protection (Cloudflare Turnstile): We employ Cloudflare Turnstile in invisible mode to verify form submissions are made by humans. As part of this process your IP address is transmitted to Cloudflare. The check runs silently in the background without displaying a visible widget, and processes anonymous browser telemetry to assess bot activity. By using this site you acknowledge the Cloudflare Turnstile Privacy Policy.
• Cookies: Session cookies on this site are used exclusively to maintain authenticated sessions for administrators and family portal members, and qualify as "strictly necessary" cookies. No third-party tracking, profiling, or marketing cookies are deployed on this website.

4. Family Portal

Families of victims who access the family portal via their private invitation link hold an account that stores the following data:

• Account data: Display name, password hash (if a password has been set), and last login timestamp.
• Videos: Videos uploaded through the family portal are stored and delivered via Bunny.net (acting as a data processor).
• Images: Uploaded images are stored in Cloudflare R2 cloud storage.
• To request deletion of a family account or associated data, please contact us by email.

5. YadYar AI Assistant & Telegram Bot

To facilitate access to memorial records and assist visitors and researchers, the Yad Kon Registry provides "YadYar", an interactive conversational assistant available on our website and via Telegram:

• AI Sub-processor (Google Gemini): Natural language queries submitted to YadYar are processed using Google Gemini models to generate factual, respectful answers. Only the prompt text and recent conversational context are transmitted; no personal identifiers, IP addresses, or tracking cookies are provided to Google. Please refrain from entering sensitive personal information in your chat messages.
• Website Assistant: Web chat history is stored strictly in your local browser storage (sessionStorage) and is never permanently stored on our servers. You can clear this conversation at any time using the "Clear conversation" button or by closing the browser tab.
• Telegram Bot (@YadYar): When interacting with our Telegram bot, we store your Telegram chat_id, first name, and username solely to deliver requested notifications (daily memorial cards and family memorial alerts) and maintain language preferences.
• Message Retention & TTL: Telegram conversation turns are retained temporarily for multi-turn conversational context and are automatically deleted after 14 days. You may also purge your conversation history instantly at any time by issuing the /clear command.
• Notification Controls & Erasure: All notification broadcasts are opt-in and can be adjusted or stopped at any time via /settings. You can block or delete the bot at any time, or email our support address to request complete erasure of your subscriber record.

6. Contact Us

For any privacy-related inquiries, takedown notices, or corrections, please reach out to us at: [email protected]