Privacy Policy

1. Our Commitment to Privacy

From Gaza is committed to protecting the privacy and dignity of all users who share their stories and those who visit our platform. We understand the sensitive nature of the content shared here and take extra precautions to ensure your safety and privacy.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

2. Information We Collect

When you submit a story:

• Your name (optional - you may remain anonymous)
• Email address (optional, kept private)
• Story content and any media you choose to share
• Date and location information you provide about your story
• IP address (hashed for privacy protection)
• Browser type and device information (for security purposes)

When you interact with stories:

• Hashed IP address for like/share tracking
• Comment content if you choose to comment
• Basic analytics data (pages viewed, time spent)

Important: We hash all IP addresses using cryptographic functions, meaning we cannot reverse the process to identify your actual IP address.

3. How We Use Your Information

We use collected information to:

• Display and share stories on our platform
• Moderate content for compliance with our guidelines
• Prevent spam and abuse through rate limiting
• Verify stories when possible
• Improve the platform's functionality and user experience
• Communicate with you about your submissions (if email provided)
• Create anonymous analytics to understand platform usage
• Preserve stories for historical documentation

4. Data Protection Measures

We implement multiple layers of protection for your data:

• Encryption: All data transmission is encrypted using HTTPS
• IP Hashing: IP addresses are immediately hashed and never stored in plain text
• Access Control: Only authorized moderators can access submission data
• EXIF Stripping: Location and metadata are removed from uploaded images
• Secure Storage: Data is stored on secure, encrypted servers
• Regular Backups: Data is backed up to prevent loss
• Audit Logging: All administrative actions are logged

5. Anonymous Submissions

We strongly support your right to share stories anonymously:

• You are never required to provide your real name
• Email addresses are optional and kept private
• Anonymous stories receive the same consideration as named submissions
• We cannot identify you from hashed IP addresses
• You may use VPN or Tor for additional anonymity

6. Data Sharing and Third Parties

We do NOT:

• Sell your personal data to anyone
• Share your email address with third parties
• Use tracking cookies for advertising
• Share raw IP addresses with anyone

We may share data only in these limited circumstances:

• When required by law or valid legal process
• To protect the safety of our users or the public
• With service providers who help operate the platform (under strict confidentiality agreements)
• Aggregated, anonymous statistics that cannot identify individuals

7. Your Rights Under GDPR/CCPA

If you are in the EU, UK, or California, you have additional rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request corrections to your data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Receive your data in a portable format
• Right to Object: Object to certain uses of your data
• Right to Restrict: Request limited processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@fromgaza.org

8. Data Retention

We retain data according to the following schedule:

• Story content: Preserved indefinitely for historical documentation
• Email addresses: Until you request deletion
• Hashed IP addresses: 90 days for security purposes
• Server logs: 30 days
• Moderation records: 2 years

You may request deletion of your personal data at any time, though story content may be retained in anonymized form for historical purposes.

9. Children's Privacy

From Gaza is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete that information promptly.

10. Cookies and Tracking

We use minimal cookies necessary for platform operation:

• Session cookies: To maintain your session while using the site
• Preference cookies: To remember your language and display preferences
• Security cookies: To prevent spam and abuse

We do NOT use:

• Advertising or marketing cookies
• Third-party tracking cookies
• Social media tracking pixels
• Cross-site tracking

11. International Data Transfers

Your data may be processed in countries other than your own. We ensure that any international transfers of personal data are protected by appropriate safeguards, including:

• Standard contractual clauses approved by regulatory authorities
• Encryption during transfer
• Strict access controls

12. Security Breach Notification

In the unlikely event of a data breach that may affect your personal information, we will:

• Notify affected users within 72 hours of discovery
• Provide details about what information was affected
• Explain steps we're taking to address the breach
• Offer guidance on protective measures you can take

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify users via email (if provided) for material changes
• Display a prominent notice on the platform

Your continued use of the platform after changes indicates acceptance of the updated policy.

14. Contact Us

For privacy-related questions, requests, or concerns, please contact our Data Protection Officer at:

Or write to us at: