A visitor's gazette · Saudi Arabia
Privacy policy
Very little data, no tracking, one local storage key for the cookie notice.
The short version
- Go Comsa Inform is a static information website. It has no accounts, comments, newsletter, analytics, advertising or social plugins.
- The site sets no cookies. Fonts, images and scripts all come from our own server.
- Your browser may keep one local storage entry,
gocomsa.consent. It stays on your device and is never sent to us. - The host may keep short-lived server logs, including IP addresses, to run the site.
- If you email us, we use your message only to deal with the request.
Who is responsible
The controller under the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL, Royal Decree M/19 of 1443H) is Go Comsa Inform, operator of infogo-comsa.online. Write to [email protected]. We have not appointed a separate data protection officer. Privacy requests go to the same address. The competent authority is the Saudi Data and Artificial Intelligence Authority (SDAIA).
What we do not collect
The gazette uses no analytics, no advertising, no tracking pixels, no fingerprinting, no embedded maps or videos, and no third-party fonts. Amiri and Karla are self-hosted. Photographs are stored on this server, not loaded from Wikimedia while you read.
Server log files
When your browser requests a page, the host may record the IP address, time, requested file, status, referrer and user agent.
Purpose: to deliver pages, keep the site stable, and fend off abuse. We do not combine logs with other sources to identify visitors.
Legal basis under the PDPL: processing needed to achieve the controller's legitimate interest in running a secure site, in a way that does not prejudice your rights or fundamental interests.
Retention: a few days to a few weeks, then deletion or anonymisation, unless a specific incident needs longer.
Local storage
The script uses one key, gocomsa.consent. It holds necessary: true, preferences: true or false, version: 1, and a timestamp. Preferences are unused except as part of that consent record. There is no separate prefs key and no theme or language store.
The consent record is stored on your device so the notice does not return on every page. If you allow preferences, you can withdraw that choice in Cookie settings.
The contact form does not post to our server. It opens your own email program. When you send a message, we process your address, name and content to answer you. We delete correspondence when the matter is closed, normally within twelve months, unless the law requires longer.
Recipients
The host (server logs) and the email provider (the mailbox) act as processors. We do not sell data. We disclose to authorities only where the law requires it.
Cross-border transfers
We do not intend to transfer personal data outside the Kingdom except where a processor's infrastructure requires it to deliver email or hosting. In that case we rely on the PDPL rules for transfer, including an adequate level of protection or appropriate safeguards.
Your rights
Under the PDPL you may request access, correction, destruction, and restriction of processing, and you may complain to SDAIA. Write to the address above. We reply within the legal time.
Security
Pages are served over https. The site is static. It has no database of users.
Changes
We update this policy when the site or the law changes. The date at the top is the current version. If a change needs consent, the notice will ask again.