Your research deserves discretion.

We use your email to verify your account, send requested sign-in codes and manage access. Account identities are retained in Amazon Cognito. Creating an account does not subscribe you to offers or marketing.

Remembered access

A Secure, HttpOnly cookie identifies a token hash held in server memory. Researcher sessions expire after three calendar months; the owner session expires after six. Signing out invalidates the current session. Deployments and restarts clear remembered sessions.

Account administration

Our private server records your email, verification state, access role, first recorded registration or sign-in, last sign-in and sign-in count. This account register is available only to the super administrator. It is separate from aggregate website measurements.

First-party measurement

We count page visits, evidence opens and date-range changes in daily aggregates on our own server. Measurements contain an approved page path, referring domain and broad device class. They do not store your IP address, research query strings, email, account identifier or a visitor cookie. These totals measure events, not distinct people. Browser Do Not Track and Global Privacy Control opt-outs are respected. You can also disable aggregate measurement using the preference control on this page.

Optional Google Analytics

When configured by the administrator, Google Analytics loads only after your consent on public information pages. Advertising features are disabled. Private research pages, account emails, identifiers and research filters are not sent to Google. You can change this choice using the analytics preferences below; declining keeps the Google tag from loading.

Source material

The archive includes source statements, retrospective figures and machine-coded reporting. Dates, geography and coverage need interpretation. A source status is not independent verification by Tactical OSINT. Access to the workspace grants no administration or direct database access.