Privacy and data
What the website receives when you read, search or send an enquiry; what is stored in your browser and how to contact us about your data.
Your account and Google sign-in
You may sign in with Google to request restricted research materials. Public pages remain available without sign-in. Google supplies your name, verified email address and account identifier. The site does not receive your password, messages, contacts or files. Tokens are used to verify sign-in and are not stored.
Dor Moriah creates a local account and stores your name, email address, transformed Google identifier, local account reference, creation date and sign-in dates. Signing in verifies identity; it does not grant permission to restricted materials. Permissions, expiry, revocation and authorised staff decisions are recorded separately.
When you are signed in and submit an access request, the site attaches your verified local account reference to the encrypted enquiry. You choose email, Telegram, WhatsApp, Facebook, X or Instagram for replies. This contact may differ from your Google email and is not proof of access rights.
Sign-in uses essential cookies: __Host-dm_reader_login for up to 10 minutes to verify the return from Google, and __Host-dm_reader for the browser session. The server ends a session no later than 8 hours after sign-in or after 30 minutes of inactivity. Signing out ends the current session. These cookies are not used for advertising.
Accounts are kept until deletion is requested; no automatic deletion period is set for inactive accounts. Sign-in events are kept for up to 90 days and permission decisions for up to 365 days. Expired operational records are cleared daily. Private daily account and permission backups are kept for up to 14 days; removing live data does not instantly remove existing backups.
To request correction or deletion, use the contact page and provide the account reference shown under Research access. We verify account ownership, end sessions and permissions and remove the account data. A limited decision audit may remain for the stated period to protect access. Revoking Google consent alone does not delete the local account. Data is not sold or used for advertising. Google sign-in is also subject to Google’s privacy policy.
Who is responsible
The website operator is the Israeli organisation Dor Moriah: דור מוריה עמותה לקידום ושילוב עולים בחברה (ע״ר), registration number 580640712. Personal data enquiries: info@dor-moriah.org.il; +972 52 516 7977; 11 Shimshon St, Haifa 3461408, Israel.
Enquiries and contact details
These forms are for questions, ideas and discussions about collaborating with Dor Moriah. Choose Email, Telegram, WhatsApp, Facebook, X or Instagram and provide your own contact details for our reply. Required fields are marked in the form. Providing information is voluntary; you can read the site without making an enquiry.
We store the contact channel and details you provide, your name and organisation if supplied, the enquiry topic and message, submission date, internal reference and the page from which the form was sent. We use this information to consider your enquiry and respond. Repeated enquiries from the same contact are linked into a correspondence history.
Your message is received by the centre’s team. On-screen confirmation means it has been received, but not necessarily read yet. We reply using the contact details you provide. Do not send passwords, payment credentials or information unnecessary for considering your enquiry.
Recipients and transfers
Enquiries are confidential and are not published. Access is limited to authorised team members and technical providers as necessary to process, store and deliver an enquiry. We use your contact details to respond to the conversation you initiated.
When we reply through your chosen email, messenger or social network, that service’s policy also applies. Technical providers may process information outside Israel. If this is unsuitable, use the operator’s telephone or another contact option.
Search and technical logs
The website server searches and filters published material. The query forms part of the URL and may remain in browser history. The website access log omits query parameters and referring addresses. No external search service is used for internal search. Do not enter confidential information into search.
The server receives your IP address and request details to deliver pages and protect the service. The access log records IP address, date and time, request method and path without query parameters, response status and size. Query parameters and referring addresses are excluded from this log to avoid recording Google sign-in codes. Daily rotation with 14 archived files is configured. This is a technical cycle, not a guarantee that every diagnostic or backup copy is erased exactly after 14 days.
To protect against spam and excessive requests, we use transformed technical connection data. It is not added to the contact details in an enquiry. Not all technical data is anonymous.
Optional reading statistics
The reading-time estimate works in your browser. Sending statistics to the server is a separate, initially disabled option in reading preferences. Collection is disabled when the browser supplies Global Privacy Control or Do Not Track.
With consent, the site sends the material path, a random identifier for the current reading visit, language and technical measures: progress, active time, estimated pace, sample count, pauses and jumps. Name, email and enquiry text are not included. The server receives the IP address to process and rate-limit the request; technical logs are independent of statistics consent.
Individual reading records expire seven days after the latest accepted event and are removed when cleanup runs. Daily totals by material, category and language are retained longer without linking to a name or email; no fixed deletion period for these totals is currently configured. Turning off the option stops future transmission but does not automatically reverse existing aggregates.
Cookies and browser storage
dm_locale stores your chosen language for up to one year. On a first visit the site uses browser language preferences, defaulting to English if no supported language is found. A specific language URL retains that language.
dm_forms is a browser-session cookie scoped to /forms/, used to protect submissions and validate CSRF. It may be set when preparing a form or consented statistics.
ss_reading_preferences stores remembered pace and statistics consent for up to 180 days when remembering or statistics is enabled. Without either option, the persistent cookie is removed. Text size is kept in sessionStorage as supsite.reading-size for the tab session.
localStorage holds dm_updates_v1 for seen and new updates and sound; dm.catalogue.view and dm.catalogue.perPage for catalogue layout and page size; and dm.author-card-sound for authorship-card sound. These usually remain until you clear the site's browser data. Their contents are not sent as enquiries or reading statistics.
You can clear cookies and localStorage for dor-moriah.org in browser settings. This resets language, preferences and update marks; blocking cookies can prevent forms from working. No advertising cookie banner is displayed: advertising trackers are not connected, and optional reading statistics have their own consent control.
External services and payments
Core images, fonts, scripts, search and document viewing are served by this website. The checked version does not include Google Analytics or Meta Pixel. Google Search Console site verification is an owner tool, not a visitor tracking script installed on the pages.
The support window displays PayPal, but a working payment adapter is not currently connected. Choosing an amount or method does not create a transaction or send payment data to a provider. This site does not collect card numbers, expiry dates or security codes. External links lead to websites with their own data practices.
Storage and protection
Enquiries are encrypted in a protected private store. The database and correspondence history are not available to site visitors. We restrict access and apply technical safeguards, but do not promise absolute invulnerability. An automatic deletion period has not yet been set. You can send a deletion request to the operator; it is considered in light of the storage purpose and applicable obligations. Additional copies may remain in service systems and backups.
Access to service systems is restricted; pages use HTTPS and forms use origin and CSRF checks. These measures do not guarantee absolute security or certify legal compliance. Send only information necessary for your request.
Your requests and choices
You may request access to your personal data and correction of inaccurate, incomplete or outdated information in the circumstances provided by Israeli law. You may also request deletion, cessation of contact use or withdrawal of consent to future processing; fulfilment and scope depend on the data and lawful grounds for retaining it.
Email info@dor-moriah.org.il, call +972 52 516 7977, or write to 11 Shimshon St, Haifa 3461408, Israel. Include a reply address and details that help locate your enquiry, such as its date or reference. Proportionate identity verification may be needed; do not attach a passport unless requested.
Changing browser settings stops the relevant future collection but does not remove a stored enquiry or account. A separate request to the operator is needed. Version dated 3 November 2026.


Global connections
Research & archive


