Privacy Statement

1. What this statement covers

This statement explains what information this website — CitizenStar's public site — processes when you visit it, and what we do with it. The data controller is CitizenStar ehf., a company incorporated in Iceland.

It does not cover the identity verification service. The data processed when verifying a person — document, facial image and associated records — is governed by the terms presented during the verification process itself and by the contract with the entity requesting it. They are two distinct processing activities and are worth not confusing.

Nor does it cover third-party sites we may link to, or the social networks where we have a presence. Each has its own policy and we encourage you to read it.

2. What we do not collect

It is worth starting here, because it is what sets us apart from most of the sites you have visited today.

This site uses no cookies. None, neither our own nor third parties'. That is why you will see no cookie banner: there is nothing to consent to.

We use no analytics or measurement tools. There is no Google Analytics, no tracking pixels, no third-party scripts of any kind. We do not know how many pages you saw, how long you stayed or which site you came from.

We build no advertising profiles or marketing segments, we do not buy information about you from third parties, and we do not combine anything you do here with any other source.

3. What is stored on your device

This site stores a single item in your browser's local storage: the theme you pick in the selector in the corner. It is stored under the name `citizenstar-theme` and its only possible value is the name of one of the three available themes.

That item never travels to any server, does not identify you and is not shared with anyone. It exists so the page looks the way you left it next time you come back. You can delete it at any moment by clearing your browser's site data, and you will lose nothing but that preference.

4. Technical connection information

Like any web server, ours records the technical data needed to deliver the page and keep the service running: IP address, date and time, resource requested, response code and the browser details your own device sends with the request.

These logs are used exclusively to operate the service, diagnose faults and protect it against abuse or attack. They are not used to profile visitors and are not cross-referenced with any other information.

They are kept for as long as those purposes require and deleted afterwards.

5. If you write to us

The site offers a contact form and a newsletter subscription. The data you enter in them is what you choose to give us.

In the contact form: reason, first name, last name, email address, phone, country and your message. Only the reason, the first name, the email and the message are required; the rest is asked for so we can answer you better, and you may leave it blank. The purpose is to handle your enquiry, and nothing else.

In the newsletter: only your email address, and only to send you the communications you asked for. You can unsubscribe at any time by following the instructions included in every message.

We do not use that data for advertising, we do not sell it, and we do not pass it to third parties except where legally required.

We keep the messages we receive for as long as handling your enquiry requires, and the newsletter data for as long as you remain subscribed.

6. Images and content delivery

The images on this site are served from our own content delivery network. Loading them makes your browser issue a request to that server, which records the same technical data described in section 4.

We embed no typefaces, maps, videos or any other resource hosted by third parties, precisely so that visiting this page does not mean connecting to servers we do not control.

7. Your rights

You may ask us for access to the personal information we hold about you, for its correction if it is inaccurate, or for its deletion. You may also object to certain processing, ask that it be restricted, and request the portability of the data you have provided to us.

Iceland is part of the European Economic Area, so processing of personal data by CitizenStar ehf. is governed by the General Data Protection Regulation (GDPR) and by the Icelandic legislation implementing it. The competent supervisory authority is Persónuvernd, the Icelandic Data Protection Authority, with which you may lodge a complaint.

To exercise any of these rights, write to us through the contact form on this site, stating the reason for your request.

8. Minors

This site is not directed at minors under the law applicable in your jurisdiction, and we do not knowingly collect information from people below that age.

9. Changes to this statement

We may revise this statement from time to time. The date shown at the top indicates when it was last modified, so you can tell at a glance whether anything has changed since your last visit.

Where a change is material, we will announce it visibly on the site before it takes effect.