Tension index
עברית

Privacy policy

Last updated: 10 November 2026

The site is built to collect as little as possible. It has no cookies, no pixels and no ads. The only script not served from the site's own domain is an anonymous visit counter from Cloudflare, our hosting provider (details below). This page lists exactly what is stored, why, and how to delete it.

What is not collected

What is stored on your device only

The browser keeps, on the device and not on the server, your language choice, your display mode choice (light or dark), a copy of the alert preferences you chose (if you turned alerts on, the server also keeps them with the subscription, as described below), and a copy of the site's pages and of the latest estimate numbers so they work offline. All of it can be removed from the browser's settings ("clear site data").

If you started or joined a family circle, your membership key is also kept on the device, so the "I'm OK" button (also on a notification) works. If you tapped "I'm OK" or "I need help" with no connection, the status and the time you tapped are kept on the device until they are sent automatically when the connection is back. After sending they are deleted from the device. A tap not sent within 6 hours is not sent and is deleted the next time the site opens. You can also cancel it on the circle page. Sending by SMS happens in your own messages app: we never see or keep phone numbers.

What is stored on the server, and why

Alert subscription (only if you enabled alerts)
The subscription address the browser creates, two encryption keys the browser creates (so only your device can read the alert), the preferences you chose (language, the level for each alert channel, whether critical news may break quiet hours, whether to get only a morning digest, whether to get the calm daily summary in the evening, quiet hours and the device's time zone), the sign-up time, the time of the last alert and the numbers it carried (so the same alert is not sent twice), and a failure counter. A log of the alerts sent to the subscription is also kept: content, time and whether the send succeeded. The address does not identify you personally; it identifies one browser on one device. The data is used only to send the alerts you chose.
Email (only if you signed up on the about page)
The address, the language you chose and the sign-up time. Nothing is sent at this stage. The address is never passed to anyone.
Family circle (only if you started or joined one)
The circle name, the nickname you chose, your language, the latest status you tapped ("I'm OK" or "I need help") and its time, a fingerprint (hash) of the membership key kept on your device, and your device's notification address if you turned on family updates. If you chose localities for the reminder (up to 5), they are stored too, and used only to send you a reminder when Home Front Command posts an alert for one of them or announces that the event there has ended. They are kept as long as you are in the circle: removing a locality deletes it, and leaving the circle deletes all of them. So that the same reminder is not sent twice, a record of the reminders sent (when, and for which Home Front Command post) is also kept; it is deleted after 7 days or when you leave the circle. Nicknames and statuses are visible only to members of the same circle. Statuses are deleted after 7 days. The device's location is never collected, and there are no phone numbers. The server never decides on its own that anyone is OK: a status exists only if a person tapped it. On iPhone, so that the app you add to the Home Screen joins the circle by itself, the server keeps a fingerprint of a temporary connection code (deleted after 7 days) and of a separate key for that app. "Leave the circle" deletes all of them.
Ideas and bug reports (only if you sent one)
The kind of message (idea, bug or other), the text you wrote, a way to reach you only if you filled it in, the page you came from, the language and the time. Messages from the four sister apps (Quiet moment, Ready Home, Emergency Rights and Safe Travels) are stored here too. No network address is stored. A new message is also sent as a short notification (its first 140 characters) to the site owner's device. Messages are deleted after a year. You can ask for earlier deletion at the address in the accessibility statement.
Rumor checks
To avoid repeating the same check, the server stores a fingerprint (hash) of the text you checked, its first 300 characters, and the result. The text itself is deleted after 6 hours; only the fingerprint and the result remain. Text that is not related to the topic is not stored at all. Do not paste personal information into the check. To limit load, the server caps the number of checks per network address per hour; the address is not stored with the text.
Server logs
The site runs on Cloudflare. As with any server, requests may be recorded in Cloudflare's technical logs (for example network address, time, requested page) for security and operations, for a limited time, under Cloudflare's privacy policy. We do not use those logs to identify users.

How to delete

External links

The site links to the Home Front Command site and news sites. Those sites have their own privacy policies, and clicking a link takes you to them.

Changes

If this policy changes, the date at the top is updated. If anything new is collected, it is described here before it happens.

Contact

Questions and deletion requests: chen9cohen5+access@gmail.com