Privacy Policy

Text you paste into the Propaganda Detection tool is not stored on our servers — but it is sent to Google (Gemini) to be analysed. We never store your IP address in readable form.

If you create an account, we store your email address. We don't sell data, don't show ads, and don't send marketing email.

This site is built and operated by the Syto project (syto.digital), an independent research effort on information operations. For anything about privacy, your data, or material published here, write to support.specialcat@gmail.com. We answer every such message.

We store your email address, an encrypted password (we never see the plain one), the date the account was created, and a role (ordinary user or administrator). Nothing else about you is stored — no name, no phone, no address.

If you sign in with Google, we receive your address and basic profile details from your Google account. We get no access to your mail, contacts, or anything else.

Authentication is handled by Supabase. Your session is kept in cookies that are required for sign-in to work at all.

When you submit text, it is sent to Google (the Gemini API) for analysis and is not stored by us. We keep only a de-identified record that a check happened: which manipulation techniques were found (their codes and sentence numbers), which narrative it matched, and what the request cost. The text itself is not in there.

When you submit a link (available once signed in), we fetch the page from our server — not from your device, so your IP is never revealed to that site — and cache the resultfor about 30 days: the address, a fingerprint of the content, a one-line summary of the theme, and the analysis, which contains short quoted fragments from that page. This exists so the same address isn't paid for twice.

Your IP address.To cap free checks we need to tell visitors apart. We don't store the address: it is immediately turned into an irreversible hash using a secret key (for IPv6, only the first 64 bits are used). Only that hash is in the database. Your real IP is seen by Cloudflare during the "are you human" check.

Please don't paste other people's personal data, medical information, or anything you aren't entitled to share with a third party: everything you submit reaches Google.

Essential cookies keep you signed in. Without them authentication cannot work. One more value — your light/dark theme choice — is kept locally in your browser and never sent anywhere.

Google Analytics 4 runs on the live site only and counts de-identified events: page views, that a tool check happened (input type, outcome, how many techniques were found), link copies, and completed sign-ups. We deliberately send no content — no pasted text, no submitted links, no email addresses. There is no advertising or remarketing.

The site currently shows no cookie-consent banner. You can switch analytics off for yourself with Google's official opt-out add-on or a browser blocker.

We send only transactional email: address confirmation and password reset, delivered by Resend from noreply@syto.digital. Open and click tracking are switched off — we cannot see whether you opened a message. We run no mailing list.

Supabase — database and authentication (your address, your session). Servers in Frankfurt (EU).

Vercel — site hosting, Frankfurt (EU) region. Technical logs may briefly contain IP addresses and requested URLs.

Google (Gemini API) — analysis of submitted text, or of the page behind a submitted link.

Google Analytics — de-identified visit statistics.

Cloudflare (Turnstile) — the "are you human" check on anonymous requests; sees your IP address.

Resend — delivery of transactional email.

X (Twitter) API — only when you submit a link to an X post, to retrieve its text.

Fly.io — the monitoring pipeline's server (Frankfurt). It processes no visitor data.

Tool check records — 30 days.

Cached link results — about 30 days after the last use.

Daily quota counters — 7 days.

Your account — until you delete it. Write to support.specialcat@gmail.com and we will delete the account and the data tied to it.

Collected public posts (monitoring) — indefinitely — this is a research archive (see the next section).

An honest caveat: expired records are removed by a daily background job. If it fails to run, data can outlive the windows above.

You can ask for a copy of your data, for corrections, for deletion, or object to a particular use. Write to support.specialcat@gmail.com — there is no self-serve form, deliberately: the volume is small and we answer personally. If you believe we process data unlawfully, you have the right to complain to a data-protection supervisory authority.

Syto's main activity is research into information operations. We systematically collect public postsfrom the open channels, accounts and feeds we monitor, store their text and metadata (publication time, view counts, the source's follower count), and publish aggregated analysis. The source registry is open — you can see it under About the project.

Some of those sources are personal accounts of public figures— propagandists, officials, commentators. We process only what they published publicly themselves, and only for a public-interest purpose: understanding how coordinated narratives spread. We do not collect ordinary users' posts, comments or replies, collect no images, and make no attempt to identify the person behind an anonymous account.

In what we publish we paraphrase rather than quote verbatim, and we never link to hostile sources. If you believe a specific item concerns you personally and was published in error, write to support.specialcat@gmail.com and we will consider it on the merits.

The site is intended for an adult audience — journalists, researchers, analysts. We do not knowingly collect children's data and do not target content at them.

If this policy changes we update the date at the top. For material changes — a new recipient of data, for instance — we notify account holders by email. The terms of use live on the Terms of Service page.