Privacy notice
Last updated 30 October 2026
In short
- Tellurial, headquartered in Luxembourg, is responsible for the personal data described here.
- We collect only what we need to run this site and to answer you. No advertising. Google Analytics runs only if you allow it.
- We never sell personal data. We store it in the European Union, except analytics data, which Google may process in the United States if you allow measurement.
- You can see, correct or delete your data at any time: [email protected].
01Who is responsible
Tellurial (“we”) is the controller of the personal data described in this notice. Our company details are in the Legal notice.
For anything about your data, write to [email protected]. We acknowledge within one working day.
02What this notice covers
- Visits to tellurial.com
- Messages you send us — through the contact form or by email, including press questions and security reports
- The monthly product note, if you subscribe
- Our business relationships with customers, prospects and partners
- People named in the public reports our platform reads (section 9)
WarStrikes — its public site, workspace and API — has its own privacy notice on warstrikes.com.
03What we collect, why, and on what basis
| Purpose | Data | Legal basis (GDPR) | How long |
|---|---|---|---|
| Running and protecting the site | IP address, browser type, page requested, date and time (server logs) | Legitimate interests: keeping the site available and secure — Art. 6(1)(f) | 30 days; longer only to investigate an incident |
| Measuring visits, only if you allow it | Pages viewed, approximate location, device and browser data, online identifiers | Your consent — Art. 6(1)(a) | Cookies up to 2 years; Google Analytics data up to 14 months |
| Answering your message | Name, work email, organisation, your message and our reply | Steps you ask for before a contract — Art. 6(1)(b); otherwise legitimate interests in replying — Art. 6(1)(f) | 24 months after our last exchange |
| Product note | Email address, name, date of consent | Your consent — Art. 6(1)(a) | Until you unsubscribe; proof of consent for 3 years after |
| Press questions and security reports | Name or alias, email, outlet, content of the report | Legitimate interests: answering the press, fixing vulnerabilities — Art. 6(1)(f) | 24 months after the matter is closed |
| Customers and partners | Contact details, role, contracts, orders and invoices | Contract — Art. 6(1)(b); accounting and tax obligations — Art. 6(1)(c) | Contract term; accounting records 10 years |
| Legal claims | Only what the claim requires | Legitimate interests in establishing or defending claims — Art. 6(1)(f) | Until the limitation period ends |
Where we rely on legitimate interests, we have weighed them against your interests and rights. You can ask us for that assessment.
04Cookies
This site uses no advertising. It sets one strictly necessary cookie when you use the contact form, and Google Analytics cookies only if you allow measurement. Details and your choices are in the Cookie notice.
05Who receives your data
We never sell or rent personal data, and we never share it for advertising.
Service providers process data for us under data processing agreements: hosting, network and email providers, our analytics provider if you allow measurement, and — for customers only — our payment provider. Each type of provider, and where the data is, is listed on Sovereignty & security. You can ask us for the full list with company names.
We disclose data to public authorities only where the law requires it.
06Transfers outside the EEA
We store your data in the European Union. If you allow measurement, Google may process analytics data in the United States. Some of our providers are companies based outside the European Economic Area, mainly in the United States. Where they could access personal data, we rely on an adequacy decision of the European Commission — including the EU–US Data Privacy Framework for certified companies — or on the Commission’s Standard Contractual Clauses, with additional safeguards where needed. You can ask us for a copy.
07Your rights
- Access — get a copy of your data
- Rectification — have inaccurate data corrected
- Erasure — have your data deleted
- Restriction — limit how we use it
- Portability — receive it in a common, machine-readable format
- Objection — object to processing based on legitimate interests, and to direct marketing at any time
- Withdrawal of consent — at any time, without affecting what was done before
Write to [email protected]. It is free. We answer within one month; for complex requests we may extend this by two months and will tell you why. We may ask you to confirm your identity.
08Complaints
If you think we have not handled your data properly, please tell us first — we will try to put it right. You also have the right to lodge a complaint with a supervisory authority: in Luxembourg, the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu — or the authority in the EU country where you live or work.
09People named in public reports
Our platform reads public sources — news outlets, official statements and public channels — and builds records of real-world events such as attacks, accidents and disruptions. Some reports name or describe people, for example officials, spokespeople or those affected. We did not collect this data from you, so we explain here how we handle it.
- Purpose: a sourced record of events for risk analysis, research and public information.
- Legal basis: our legitimate interest, and that of our users, in that record — Art. 6(1)(f) — together with the protection of freedom of expression and information — Art. 85.
- What we keep: each report as published, with a link to its source. We do not build profiles of people and we do not monitor individuals.
- Sources: publicly available reports, each labelled by kind of source.
- How long: as long as the event remains part of the historical record. Corrections and withdrawals are logged in public.
- Your rights: the rights in section 7 apply. To ask about, correct or object to a mention, write to [email protected].
10Automated decisions
We make no decisions about you based solely on automated processing that have legal or similarly significant effects. Language models help us group and classify public reports about events — never to assess people.
11Do you have to give us data?
No. But we need your email address to reply to you, and some details to enter into a contract with you.
12Security
Data is encrypted in transit. Backups are encrypted before they leave our servers. Access to personal data is limited to those who need it, and is logged.
13Changes to this notice
We update this notice when our processing changes. The date at the top shows the current version. We announce significant changes on this page before they take effect.