Privacy Policy

HaitiDocs is a public, read-only library of Haiti’s economic data, official documents, map layers, World Bank projects and news. It is read on the web, and inside ChatGPT and Claude through the Model Context Protocol server at mcp.haitidocs.org. HaitiDocs is an independent project. This policy covers the web site, the connector and the Ask box.

Data collected

Browsing HaitiDocs does not require an account.

• Requests through an AI assistant. When you use HaitiDocs inside ChatGPT or Claude, that assistant sends the search terms or resource identifiers needed to return library content. HaitiDocs uses them to produce the response and builds no profile from them.
• Questions to the Ask box. The Ask box on the home page sends your question to Google's Gemini API, which generates the answer. The request carries the last three questions and answers from the same session, so that a follow-up can be understood. That session history is held in server memory, capped at three exchanges, and lost when the service restarts. It is not linked to your IP address.
• Technical logs. The web host writes an access log entry for each request, which includes the IP address, the timestamp, the requested path, the response status, the referring page and the browser's user agent. It is held under the retention schedule below.
• Contact and document submissions. If you use a contact or submission form, HaitiDocs receives the name, email address, message, document title and source URL you enter, and any file you attach. The submission handler emails those details to the site mailbox. It sets a session cookie and writes a rate-limit record, which together cap how often one browser and one network can submit.
• Email lists. If you sign up for an email list, HaitiDocs stores the address, the subscription status, a confirmation token, the page the sign-up came from, and the dates of those events. Every message carries an unsubscribe link.

Website analytics

Three analytics services run on every page, and two of them do not run at all for visitors in the European Economic Area, the United Kingdom or Switzerland. Cloudflare Web Analytics, which the content delivery network injects into each page, records the page address, the page that referred you, page-load timings, and your IP address. Google Analytics and Microsoft Clarity both load after the page has finished rendering. Google Analytics records the page you opened and how you arrived, and keeps an identifier in a cookie in your browser so that your repeat visits count as one visitor. Microsoft Clarity records the visit as it was drawn on your screen, so that a session can be replayed to study how the site is used, and it syncs an identifier with a Microsoft advertising domain. Its masking is set to Balanced, which hides text you type into a form from the recording. None of the three receives your name or your email address, and none is used to advertise to you or to track you across other websites. Each is operated by its provider, under that provider's privacy terms.

Google Analytics and Microsoft Clarity are not loaded for a visitor whose request reaches the site from the European Economic Area, the United Kingdom or Switzerland. Both set an identifier in the browser, which the law in those places allows only with prior consent, and HaitiDocs asks for no consent because it runs neither service there. The country comes from the content delivery network, which resolves it from the connection and passes it to the page; no visitor is asked where they are. Cloudflare Web Analytics runs everywhere, and it sets no identifier.

Browser storage and third-party page resources

HaitiDocs stores interface settings in your browser's local storage, including language, view, theme, dismissed notices, and map-tour state. The public map does not ask for, store, or transmit ACLED credentials. Its ACLED layer reads a prepared cache.

Public pages use system fonts and do not request typefaces from Google Fonts. Interactive charts load Plotly from a copy served by HaitiDocs, so opening those charts does not contact Plotly's content delivery network. The home page also loads a security check supplied by the site's infrastructure provider, which separates people from automated traffic before the assistant will accept a question. It runs as soon as the page opens, whether or not you use the assistant, and the provider receives your IP address, the address of the page, and signals about your browser and device.

Beyond the services named above, the interactive map contacts other organizations from your browser. Opening it requests base map styles and tiles from CARTO and label fonts from the MapLibre glyph server. Selecting the satellite or topographic base layer requests tiles from Esri. Enabling the earthquake layer requests events from the United States Geological Survey. Each of those receives your IP address and the tile coordinates or query parameters of the layer being drawn. If you type a place name into the map search box, that text is sent to the OpenStreetMap Nominatim service to be resolved into coordinates. No page other than the map makes those requests.

Data not collected

HaitiDocs does not collect or request payment card information, protected health information, government identifiers (such as social security or national ID numbers), passwords, API keys, or other credentials. Please do not send such information to the service.

How data is used

Search terms and resource identifiers are used to return the documents, indicators and map layers that match them, each with its source and a link to the original.

Sharing

HaitiDocs does not sell personal data and does not use it for advertising or profiling. The site runs on a shared web host and on a cloud server in Ashburn, Virginia, in the United States, reached through a content delivery network with servers worldwide. Contact and document submissions pass through that hosting and the site's email provider. Email-list records are held by the site's database and mail service. Each browser connection named above discloses at least the IP address and the page address to the provider it reaches. If you use HaitiDocs through an AI assistant, that assistant provider also handles the request under its terms.

Data retention

Each period below is enforced by code or by server configuration. Search terms are not added to a profile.

• Contact and document submissions. The mail carries no IP address. It records the network the message came from, which is the first three parts of an IPv4 address or the first three groups of an IPv6 one. The site mailbox holds the message indefinitely.
• Rate-limit records. The file is named with a hash of the address and holds a list of submission times. A submission stops counting against the limit after 15 minutes. The file is deleted by the next submission, so it is held until one arrives. A hash of an address is not anonymous.
• Origin server logs, which record a client address when a request fails. 30 days, and about 6 at current traffic, because the journal reaches its size limit first.
• The query log for the Ask box and the connector. 30 days. It records the query text, with no address and no session identifier.
• Operational job logs. 8 weeks. They hold no visitor address.
• Aggregate audience counts. Kept indefinitely. They hold no address, no search text and no visitor identifier.

The analytics providers named above receive your address and keep their copy for periods they set. For the visitors they do run for, Google Analytics is set to 2 months for event data and 14 months for user data. Microsoft and Cloudflare set the periods for Clarity and for Cloudflare Web Analytics. The web host and the content delivery network set the periods for the request logs they keep.

You may request deletion of information you submitted by contacting the address below, subject to a legal requirement to retain it. A copy inside a backup is removed when that backup is rotated out, within 8 weeks.

Sources and attribution

The library indexes public materials from publishers including the Institut Haïtien de Statistique et d’Informatique, the Banque de la République d’Haïti, the Ministère de l’Économie et des Finances, the World Bank and the IMF. Each result carries its source, license where available, and a link to the original. HaitiDocs does not claim ownership of source content.

Children

HaitiDocs is intended for a general audience and is not directed to children under 13.

Your choices and contact

You can clear HaitiDocs interface settings through your browser's site-data controls. Every email-list message includes an unsubscribe link. For an access, correction, deletion, or other privacy request, contact [email protected].

Changes to this policy

This policy may change. A material change moves the “Last updated” date above.