Privacy Policy

Who controls your data

This website, ranifrah.com, is operated by Digimate, Rani Ifrah, business number 039390802, HaZore'a 245, HaZore'a, Israel.

For any privacy request, write to info@digimate.co.il.

What is collected

Information you give voluntarily

Only when you fill in a form. Depending on the form, this is your name, email address, phone number, company name, and the answers you select in a diagnostic quiz. Nothing on this site requires an ID number, a payment detail, or any health or financial information, and you should never send those through it.

Information collected automatically

Pages viewed, the site you arrived from, device type, and country-level location. Two further sets are collected once you agree in the cookie banner:

• Analytics - how the site is used, in aggregate, through Google Analytics 4.
• Marketing - campaign measurement and retargeting through the Meta Pixel. Agreeing means Meta can recognise you as someone who visited this site and can show you ads accordingly.

What each banner option actually means

The banner offers two options, and both of them keep you on the site. You are never required to accept in order to browse.

• "Accept all" - both sets above are collected: Google Analytics with a cookie and a visitor ID, and the Meta Pixel.
• "Only what is necessary" - neither is collected. The Meta Pixel is never loaded, so Meta learns nothing about your visit at all. No measurement cookie is written, no visitor ID is generated, and no profile is built about you.

What does continue if you choose "only what is necessary", and before you click at all: anonymous aggregate counting of visits, and we would rather say so plainly. It comes from two places: Plausible, and Google Analytics running in Google's consent mode with storage denied. In that state Google sets no cookie, generates no visitor ID, and cannot link your visit to any other visit or to any other site. What it sends is an anonymous signal that a page was viewed, which appears in our reports as a number and nothing more. We use it to know how many people arrive and which pages are useful, and it cannot be turned back into a person.

One further tool runs regardless of your choice: Plausible Analytics. It sets no cookies, stores no IP addresses, builds no profile, and cannot recognise you across sites. It counts visits and nothing else.

Why

• Forms - to reply to you, to send the newsletter or material you asked for, and to run the diagnostic you started.
• Analytics - to understand which pages are useful and which are not.
• Marketing - to measure whether an advertising campaign produced anything, and to show ads to people who have already shown interest.
• Consent records - to be able to demonstrate what you agreed to and when.

Cookies and local storage

The first two rows are stored in your browser's local storage rather than as cookies. They stay on your device and are never sent anywhere.

The Google and Meta rows appear only after you agree to the matching category. Lifetimes are as documented by those vendors and can change without notice to us.

Who else processes your data

Each of the following receives only what is listed. Several operate outside Israel, in the European Union or the United States.

• Plausible Analytics - page views, referrer, coarse country. No cookies, no identifiers. EU-hosted. Privacy policy.
• Google Analytics 4 - usage events, device information, a cookie identifier. Only after you agree to Analytics. Privacy policy.
• Meta - page views and lead events, a cookie identifier. Only after you agree to Marketing. No email address, phone number, or name is ever sent to Meta. Privacy policy.
• Mailcoach - the email address and other details you type into a subscription or contact form. This is where the newsletter is sent from.
• Supabase - a copy of diagnostic form submissions, and the record of your cookie choice. Hosted in the European Union. Privacy policy.
• Google Fonts - loads the Inter typeface. Your IP address reaches Google on every page, before and regardless of any consent choice, because the font is required to render the page.
• Vimeo and YouTube - only on pages that embed a video, and only once the video loads. Vimeo, YouTube.

How long it is kept

• Contact details you gave us - kept while you are on the mailing list. When you unsubscribe, which every email lets you do in one click, you are removed from it.
• Diagnostic form submissions - kept for as long as the contact details they belong to.
• Google Analytics - 2 to 14 months, according to the property configuration. This site uses the standard edition.
• Meta - according to Meta's own retention policy, which we do not control.
• Plausible - aggregate statistics only. Nothing personal is retained.
• Consent records - kept for as long as they are needed to demonstrate the consent given.

Your rights

Under Israel's Privacy Protection Law, including Amendment 13, and under the GDPR where it applies to you, you may ask to see the personal data held about you, to correct it, or to have it deleted. Write to info@digimate.co.il and you will get an answer.

To change or withdraw your choice, use the Cookie settings link at the bottom of any page. It reopens the same banner, and switching to "only what is necessary" is exactly as easy as accepting was - one click, without leaving the site. Withdrawing stops any identifying collection immediately.

It does not, however, erase what was already sent. Data that reached Google or Meta before you withdrew is held under their retention policies, not ours. We would rather say that plainly than imply a deletion we cannot perform.

How your data is protected

The site is served over HTTPS and restricts which external scripts may run through a Content Security Policy.

The database holding form submissions and consent records cannot be read or written directly from the browser. Writes go through a validated server-side function that checks the request came from this site and rejects anything malformed; there is no read access from the public site at all.

Consent records deliberately contain no name, email address, or IP address. They hold a random identifier generated by your browser, your choice, and the time you made it. That is enough to prove what you agreed to without identifying you.

Changes to this policy

If what we do with data changes, this page is updated and the version at the top changes with it. When the version changes, the cookie banner asks you again, because agreement to an earlier version is not agreement to this one.