Privacy policy
This notice explains what information PakFiscal handles when you read the public site, contact the publisher or use the protected Explorer.
Last updated: 2 October 2026. “PakFiscal”, “we” and “us” refer to the publisher of this independent public-finance website. The site is operated under the PakFiscal name. To contact the publisher about privacy, use the contact form.
Information we handle
- Contact requests: the name, work email, organisation, subject and message you submit. The form sends these details to the publisher by email so we can reply. We do not add them to the public finance dataset or publish them as a comment.
- Explorer accounts and sessions: the User ID, role, password verification data and session records needed to provide and secure authorised access. Passwords are stored as salted password hashes. Session tokens are random, and the database stores a hash of each token rather than the token itself. Each signed-in browser has its own session.
- Technical and usage information: our hosting and security providers may process request and diagnostic information, including IP address, to deliver, maintain and protect the site. The contact and sign-in forms also use request IP addresses for short-window abuse throttling. Vercel Web Analytics is integrated into the site; when enabled for the deployment, it provides aggregated usage statistics. Vercel says its Web Analytics does not use third-party cookies, uses a hash derived from a request for visitor identification, and discards session identification after 24 hours. See Vercel’s Web Analytics privacy information.
- Cookie preference: a small first-party preference cookie records whether this browser has chosen essential-only use or accepted optional advertising. See the Cookie policy for the cookie names and controls.
Why we use it
We use information to respond to messages and access requests, administer and protect Explorer accounts, prevent abuse, keep the site working, understand aggregate readership, and—only where advertising is configured and accepted—show advertising. Depending on where you are and the activity involved, the applicable legal basis may include your consent, providing a requested service, compliance with a legal obligation, or our legitimate interests in operating and securing an independent publication. You can withdraw an advertising choice as described in the Cookie policy.
Service providers and sharing
We use Vercel for hosting and site analytics, Neon for database services, and the mail provider configured for contact-request delivery. These providers process information as needed to perform those services and may also process limited technical information for their own security and service operations under their terms. If advertising is enabled, Google may receive information through its advertising technology after you accept optional advertising; see how Google uses data on partner sites and apps. We do not sell contact-form messages or Explorer credentials. We may disclose information where required by law or where reasonably necessary to protect people, the site or our legal rights.
International processing
The publisher and service providers may handle information in more than one country. Data-protection rules and available rights differ by location. Where a transfer safeguard is required by the law that applies to a particular transfer, the responsible provider or publisher must use an available safeguard for that transfer.
How long information is kept
We keep contact messages for as long as reasonably needed to handle the request and related follow-up, maintain necessary records, and address legal or security issues. Explorer account records are kept while the account is active and as reasonably needed for security and administration after deactivation; session records expire or are removed when a session ends or is revoked. Technical logs and analytics are retained according to the relevant provider’s settings and policies. Retention can be longer where a legal obligation or dispute requires it.
Your choices and rights
You can choose whether to allow optional advertising, change that choice later, and control cookies through your browser. Depending on the law where you live, you may also have rights to request access, correction, deletion, restriction, objection, portability or withdrawal of consent. To ask about your information or exercise a right, contact the publisher and describe your request. We may need to verify it and may be unable to fulfil requests that conflict with legal duties or another person’s rights.
Children
The site is intended for a general audience interested in public finance and is not designed to solicit personal information from children. Please contact us if you believe a child has sent us personal information.
Security and changes
We use access controls and technical safeguards appropriate to the site’s functions, but no internet transmission or storage system can be guaranteed completely secure. We may update this notice as the site or applicable requirements change. The date above identifies the latest published revision.