Privacy statement

You can use IACS Radar without an account. What you follow in My Radar, your asset inventory in the Asset Matcher and the chosen theme are stored only in your own browser (localStorage) and are not sent to the server. If you choose a language, a functional cookie remembers that choice. IACS Radar uses no tracking cookies and no analytics services.

To see how the site is used, the web server keeps a visit log: which page was requested and when, the referring page, the type of browser and device, and a shortened IP address (for IPv4 only the first two numbers, for IPv6 the first 32 bits). A visit therefore cannot be traced back to one person or connection; only the country is roughly derived from it. Cookies, login details and codes from notification links are not logged.

In addition, every page loads a small counting script from this site's own server (Umami). It sets no cookies and stores nothing in your browser. For each visit it sends the page address (without search parameters, so also without codes from notification links), the page title, the referring site, and the screen size and language of your browser. From this the server derives the type of browser, operating system and device, and roughly the country, region and city. Your IP address is not stored in the process. To count visitors, the server creates an anonymous code from your IP address and browser using a key that changes every month, so you are not recognised over a longer period. If 'Do Not Track' is turned on in your browser, the script does not count you.

From both, the server itself produces an overview of totals, such as visitors per day and popular pages, which only the administrator can view. No third-party analytics service is used and the data is not shared with anyone. The log is kept for 90 days and then deleted automatically; the counts from the counting script remain on the server.

The legal basis is the legitimate interest in managing, securing and improving the site.

If you sign up for email notifications, we store:

• your email address;
• what you follow (vendors, products, CVEs), the chosen frequency, whether you want immediate notifications, and your language;
• when you signed up and confirmed, and when the last email was sent;
• if you turned on text message notifications: your mobile number, and while confirming it an encrypted (hashed) code;
• which notifications you have already received, so that you get nothing twice.

We use this data only to send you the notifications you asked for. No newsletters, no advertising, and we do not pass your address on to anyone except the mail service that sends the emails (see below). IACS Radar itself does not track whether you open an email or click a link. The mail service Brevo does measure this by default, to check delivery; IACS Radar does not view or use that data.

The legal basis is your consent: you sign up and confirm this via a link in a confirmation email. You can withdraw your consent at any time via the unsubscribe link at the bottom of every email.

Your data is kept as long as you are subscribed. If you unsubscribe, your email address, your selection and any mobile number are deleted immediately; you can also remove just your number on the management page. A subscription that is not confirmed within 7 days is deleted automatically.

To limit abuse of the sign-up form, your IP address is kept briefly (at most one hour) in the server's working memory. It is not stored.

The data is stored on the server that runs IACS Radar. The emails and text messages are sent via Brevo (Sendinblue SAS, Paris), a service with servers in the European Union. For that purpose Brevo receives your email address or mobile number and the content of the message.

Connections to the site use HTTPS and the emails are sent encrypted (TLS) to Brevo. The file with subscriptions can only be read by the application.

You can view, correct or delete your data. Unsubscribing via the link in an email deletes everything immediately. For other questions: iacsradar@marcovader.nl.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

See also the terms of use.