Privacy policy
Last updated 23 July 2026 · applies to operationgladio.com
Who is responsible
Perseus Tech. is the data controller for this site. Questions about your data, or to exercise any of the rights below, contact privacy@perseustechnology.se.
What we collect, and why
This is a research archive. You can read, search and browse all of it without an account, and we do not use advertising, profiling or third-party analytics. We collect only the following.
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Searches the words you search for, the number and relevance of results, your IP address, approximate country, browser user-agent, and your username if signed in |
To see which topics people look for and — more importantly — which questions the archive answers badly, so material can be added where it is missing. | Legitimate interests (Art. 6(1)(f)): understanding and improving the archive. | 90 days |
| Security & audit log sign-in attempts, rate-limiting and bot-check events, and changes made by editors; with IP address, approximate country and user-agent |
To protect the site against brute-force attempts, scraping and abuse, and to keep an accountable record of edits to the archive. | Legitimate interests (Art. 6(1)(f)): security and integrity of the service. | 90 days |
| Account details username and a salted password hash — only for editors and administrators |
To operate accounts for the small number of people who edit the archive. | Contract / legitimate interests. | Until the account is deleted |
We never see or store your password itself — only an irreversible hash of it. Country is derived from your IP address using a local database on our own server; your IP is not sent to any geolocation service.
Cookies
One cookie, and only if you sign in: gladio_session, which keeps you signed in. It is
HttpOnly, SameSite=Lax, sent only over HTTPS, and expires after 14 days or when
you sign out. There are no advertising, tracking or analytics cookies, so there is no cookie banner
to click away. Browsing without an account sets no cookies at all.
Third parties
The archive is served from our own server, and the audio and transcripts are hosted by us. Two pages load public assets from third parties, which means those providers can see your IP address and the page you requested:
- jsDelivr (cdn.jsdelivr.net) — the graph and map libraries used on the Graph, Connect and Map pages.
- CARTO / Fastly (global.ssl.fastly.net) — background map tiles, on the Map page only.
We do not share, sell or transfer your data to anyone else, and we do not use it for advertising.
Your rights
Under the GDPR you have the right to:
- ask what personal data we hold about you, and get a copy (access, and portability);
- have inaccurate data corrected (rectification);
- have your data deleted (erasure);
- ask us to restrict how we use it, or object to our use of it under legitimate interests — including objecting to search logging;
- complain to a supervisory authority. In Sweden this is Integritetsskyddsmyndigheten (IMY).
Because search and security records are identified only by IP address, please include the IP address and rough time period in any request, so we can find the right records.
Security
Traffic is encrypted with HTTPS. Passwords are stored only as salted hashes. Editing requires an account, and mutating actions are protected against cross-site request forgery. Sign-in is rate-limited and protected by a challenge to block automated attempts.
Changes
If this policy changes, the date at the top will change with it.