Privacy notice

You can use the website and join early access without optional analytics. We use your choices to limit what is collected.

Updated October 3, 2026 · Consent version 2026-10-03.2

About Istimthal

Istimthal is an independent technology project that has not yet incorporated. For privacy questions and requests, contact contact@istimthal.com.

Opening a link

Opening this website sends the information needed to deliver and protect the request to Cloudflare, our hosting provider. It does not create an optional analytics profile before you choose to accept analytics. A returning browser with a current, valid choice can resume analytics. We respect Global Privacy Control and Do Not Track signals.

Optional visit analytics

With your permission, our server assigns random browser and session IDs and records public page paths, interaction types and times, a broad country and device category, referring website domains, and bounded campaign labels. We use this information to understand which content is useful and where early-access interest comes from. Consent records include the time, notice version and choice method.

These records are pseudonymous personal information: an ID can recognise a returning browser, but does not verify a person's identity. Our analytics does not store raw IP addresses or raw user-agent strings, use browser fingerprints, record keystrokes or screens, or track browsing across other websites. We do not sell these records or share them for advertising.

Optional analytics stays off until you accept. Turning it off erases this browser's stored profile, sessions and events, and clears its optional cookies. A deleted browser ID cannot silently recreate its old history. Accepting again starts a new permitted record.

Joining early access

Your email is needed so the founders can respond about early access or a pilot. Name, company, area of interest and goal description are optional. We also record the request time, contact consent and notice version. Please do not include sensitive personal information, confidential material or information about other people.

Joining does not create a subscription or send an automatic email. Permission to discuss early access is not permission for unrelated marketing. Contact details are not linked to browsing history without a separate optional choice. Where additional project questions are offered, their purpose is to assess fit for a requested pilot, and answering them is optional.

Keeping and deleting records

Browser analytics expires 90 days after the profile's creation, and can be erased earlier. Expired history is excluded from browser use and owner views immediately, and a daily cleanup deletes the stored records. Waitlist entries expire 365 days after submission and are removed by the daily cleanup, unless you remove them sooner. These are our retention limits, not a claim that every law prescribes these periods.

Deleting analytics unlinks a separately submitted waitlist entry rather than deleting its contact details. You can request removal of the signup separately. Cloudflare's restricted recovery history may retain earlier database states for a limited period according to the service plan; those states are not used for normal analytics or contact. Any restoration must respect previously approved deletions.

Delivery, cookies and form protection

An essential cookie remembers your choice for up to 180 days. Expiring, keyed anti-abuse counters protect forms and owner access; our application does not store the raw IP addresses used to create those counters. Private owner sessions expire after one hour.

Cloudflare processes request information to host and protect the site. Its Turnstile check loads when you engage with the form. Turnstile can process IP address, user-agent, TLS fingerprint and site-origin information for bot protection. Cloudflare also acts as a separate controller when improving its bot detection. This security processing is distinct from our optional audience analytics. Read the Turnstile privacy addendum, Cloudflare privacy policy and our cookie details.

Where processing happens

Hosting, form checks and stored records use Cloudflare infrastructure. Processing can take place outside your country, including in Europe and other locations used by the service. We do not promise Saudi-only storage. Dashboard access is restricted; exported files must also be handled privately.

Your controls and requests

Open cookie preferences to change analytics, download this browser's stored visit data, or erase it. Export requires this browser's signed ID and includes only its analytics, not waitlist contact details. If cookies have been cleared, those controls may no longer locate the previous browser record.

For information you submitted, request access, correction, removal or withdrawal by emailing contact@istimthal.com. We may need proportionate verification that you control the submitted email address so another person cannot obtain your details. Rights, exceptions and response periods depend on applicable law. You may raise a concern with the relevant privacy authority.

Changes

We update this notice when practices change. A material change to optional processing requires a fresh choice; older consent does not silently authorise a broader purpose.