Privacy

Privacy Policy

Effective: 9 November 2026. The Salient One platform is operated by SalientOne OÜ (“Salient One”) as a public research tool. This policy covers data handling for the Scorecard web application at salientone.eu/s1 and the Social Impact tools at salientone.eu/social-impact.

Social Impact working drafts

Assessment drafts autosave separately from report revisions. Guest drafts use IndexedDB browser storage and can be recovered for 30 days; expired copies are removed when the workspace is next opened. Anyone using that browser may access guest drafts. Signed-in working drafts sync to the owning account with version conflict checks and remain until deleted. An account-separated copy supports recovery on the device. Device recovery for the previous account is removed when this workspace detects sign-out or an account change.

Project text is excluded from analytics and public discovery. Cloud drafts are restricted to their owner. Report revisions and exports require a separate explicit action and retain the existing assessment validation. Delete working drafts from the dashboard and report records from the report list. Browser storage may be unavailable or cleared by the browser; the save status shows device or cloud failures. Use your own device when working with sensitive project information.

Cookies We Use

Consent cookie (s1-cookie-consent). A first-party cookie that stores your cookie preference (“accepted” or “declined”). Set the moment you interact with the cookie banner. Expires after 1 year. Salient One also remembers acceptance of this account-analytics notice in the essential host-only s1-account-analytics-consent preference cookie for up to one year; an older aggregate-analytics choice does not enable account-linked tracking. Strictly necessary — without it we cannot remember your choice.

Analytics cookies (_ga, _ga_*). Google Analytics (GA4) sets a small number of first-party cookies to measure aggregate site usage. We have enabled IP anonymisation; GA4 does not log or store individual IP addresses. These cookies are only set if you click “Accept” on the cookie banner. You may decline with no loss of functionality. See Google’s Privacy Policy for details on how Google handles this data.

Session analytics cookies (Microsoft Clarity). If you consent, Microsoft Clarity records pseudonymous interaction data such as page visits, clicks, scrolling, and navigation patterns so we can identify usability problems. Clarity masks sensitive text and information entered by users. See Microsoft’s Privacy Statement for details on how Microsoft handles this data.

Session cookie (s1_session). Set only when you log into an account. An HttpOnly, Secure, SameSite Lax cookie containing an opaque session token. Expires 30 days after it is issued. Strictly necessary for authentication — we cannot keep you signed in without it.

Salient One journey cookie (s1_journey). If you accept analytics, this optional HttpOnly cookie lets Salient One preserve your first arrival and the visit that leads to signup for up to 30 days. We store a public landing-page path, referring hostname and registered campaign source, medium and campaign labels. Unrecognised labels are discarded. Full referring URLs, URL queries and fragments are omitted. Initial entry information stays only in page memory until you accept; it is not stored or transmitted before acceptance. If source information is unavailable, we record that limitation.

Other Information We Collect

Server logs. Cloudflare, our infrastructure provider, retains standard access logs (URL requested, timestamp, anonymised client IP) for a limited period for operational purposes. These logs are not shared with third parties.

User accounts. When you create an account, we store your email address, the display name you provide, and, if you choose password sign-in, a PBKDF2 hash of your password (the plain-text password is never stored). We also store API keys you generate, as a SHA-256 hash; the plain-text key is shown only once at creation time. We log aggregate daily API request counts per key for rate limiting purposes, but do not log individual API request payloads or queried parameters in those aggregate counters.

Google and Microsoft sign-in. If you choose a connected provider, we use its stable account identifier, name and email address to authenticate you. We do not request access to your mailbox, calendar or files, and do not keep provider access or refresh tokens. A provider email match alone does not connect an existing Salient One account: you must confirm the existing account before linking it. Provider sign-in is separate from optional analytics.

Sanctions screening. Anonymous search values are processed transiently to return candidate matches and are not added to a screening decision history. Anonymous access is rate-limited using a one-way hash derived from the request IP; the raw IP is not stored in the rate-limit counter. Standard infrastructure logs may still contain request metadata, but search values are sent in a private POST body rather than the page URL. If you are signed in, your query fields, result count and top-candidate summary may be retained in your private decision history. Analytics events contain only coarse fields such as access mode, entity type and match band; names, identifiers and query values are not sent as analytics event properties. Screening inputs are masked from session analytics.

Optional account-linked analytics. With analytics consent, Salient One links signup source and public page visits to your account. These optional acquisition and page records are separate from required account action records. Our first-party account and journey identifiers are not sent to Google Analytics or Clarity. Private receipt, invitation, password-reset and assessment pages are excluded from browser analytics.

Optional page analytics follows your recorded analytics preference. Required account actions, including authenticated API requests, do not. Use “Cookie settings” in the footer to change your choice. Declining immediately stops browser analytics and sends a request to remove optional first-party analytics for the account identified by your sign-in or current journey cookie. If the connection is unavailable, an essential privacy-choice cookie (s1-analytics-withdrawal) remembers the pending request for up to one year, with no user identifier. A visible status remains until cleanup is confirmed, and Salient One retries when connectivity returns. API clients follow the last confirmed account preference until the withdrawal reaches the service. Earlier accepted choices on another browser do not automatically reverse a recorded withdrawal. You can explicitly accept again. Declining does not limit Salient One functionality or remove operational records needed to provide the features you use. Optional activity is retained for 90 days, signup attribution for 365 days and journey records for 30 days; expired data is excluded from reports immediately and purged daily. Account deletion removes associated optional analytics.

Required account action records

Signed-in actions are recorded with your account, fixed operation type, product, time and outcome to operate, protect and understand use of the service. Recording does not depend on optional analytics acceptance, decline or withdrawal. It covers observed account changes, screening/API requests, saves, edits, deletes, analysis, source/report access and exports. These records contain no form values, screening names, project/document text, filenames, questions, credentials, private source URLs or request bodies. Private owner reporting receives only this bounded metadata. Browser action receipts are reported observations, not proof of reading or a completed download.

Required action records are retained for 90 days, excluded after expiry and purged daily. Account deletion removes them. Withdrawing optional analytics or deleting a particular document does not erase separate required activity records. Private Pro work and Social Impact cloud drafts keep their existing explicit-deletion rules. Required collection begins with the 9 November 2026 release; missing historical actions or agreement acceptances are not invented.

Data Sharing

Salient One does not sell or rent user data. After consent, Google and Microsoft process limited analytics data on our behalf as described above. All indicator data displayed in Scorecard is sourced from publicly available official datasets (World Bank, Transparency International, INFORM JRC, US DOL, OFAC, EU FSF, UK FCDO, UN Security Council, Swiss SECO, GDELT).

Your Rights

Under the EU General Data Protection Regulation (GDPR), you have the right to access, rectify, or erase any personal data we may hold. This includes your account data, API keys, and usage records. To request account deletion or exercise any GDPR right, contact engage@salientone.eu. We will respond within 30 days.

SalientOne OÜ · Global risk-intelligence infrastructure · salientone.eu