1. General Information & Legal Basis
The Yad Kon Registry is dedicated to documenting and preserving the memory of victims of human rights violations in Iran. We hold the privacy of our visitors, administrators, and the families of the victims in the highest regard. This policy outlines how we handle and protect data on this platform.
2. Data Relating to the Deceased
Pursuant to Recital 27 of the European Union General Data Protection Regulation (GDPR), GDPR rules do not apply to deceased individuals. However, we acknowledge that national laws in various jurisdictions protect post-mortem privacy:
Family members and authorized next-of-kin have the right to request corrections, updates, or complete removal of profile records and media of their loved ones at any time. To submit a modification or erasure request, please contact us via email.
3. Visitor Data & Security
We adhere to strict data minimization principles:
- Server Logs: Visitor IP addresses and request metadata are logged temporarily for system health, diagnosis, and security monitoring (under the legal basis of Legitimate Interest). These logs are automatically rotated and deleted after a short retention period.
- Interactive Form Submissions: When you submit a profile correction, write a tribute, ask a question, or light a memorial candle, a one-way cryptographic hash of your IP address — not the IP address itself — is stored in our database. This hash is used solely for anti-abuse rate-limiting and cannot be reversed to recover your original address. The correction report form additionally stores an optional email address if you choose to provide one for follow-up.
- Bot Protection (Cloudflare Turnstile): We employ Cloudflare Turnstile in invisible mode to verify form submissions are made by humans. As part of this process your IP address is transmitted to Cloudflare. The check runs silently in the background without displaying a visible widget, and processes anonymous browser telemetry to assess bot activity. By using this site you acknowledge the Cloudflare Turnstile Privacy Policy.
- Cookies: Session cookies on this site are used exclusively to maintain authenticated sessions for administrators and family portal members, and qualify as "strictly necessary" cookies. No third-party tracking, profiling, or marketing cookies are deployed on this website.
4. Family Portal
Families of victims who access the family portal via their private invitation link hold an account that stores the following data:
- Account data: Display name, password hash (if a password has been set), and last login timestamp.
- Videos: Videos uploaded through the family portal are stored and delivered via Bunny.net (acting as a data processor).
- Images: Uploaded images are stored in Cloudflare R2 cloud storage.
- To request deletion of a family account or associated data, please contact us by email.
5. Contact Us
For any privacy-related inquiries, takedown notices, or corrections, please reach out to us at: [email protected]