Privacy policy

Only what is needed to handle a request. There are no hidden fields and nothing is collected that you were not asked for.

• Your name, phone number and email address — so we can come back to you with an answer. A rest-unit request also collects the family name, both spouses' names and a mobile number for each of them.
• For a rest-unit request: your home address — street and number, floor, apartment number and town.
• For a rest-unit request: both spouses' Israeli identity numbers. They are stored encrypted — in the database they are meaningless text — and are decrypted only on the admin screen, for someone permitted to see the request. They are used to identify you to the charity and for nothing else; they are passed to no one and written to no log.
• For a rest-unit request: the name, address and phone number of two people we may ask about you. Those are somebody else's details — third parties who did not fill in the form and have not read this page — so please ask their permission before giving them to us. We contact them only to consider the request, and for no other purpose.
• For a rest-unit request: the dates you asked for and how many people are coming.
• The description of your situation, in your own words. This is the most sensitive field on the site and it is treated accordingly.
• The IP address the request was sent from — not stored as it is, but as a one-way hash used solely to stop the site being flooded with automated submissions.

Handling your request and nothing else: reviewing it, replying to you, and — if it is approved — reserving the dates and sending you the arrival details. We do not use it for mailing lists, advertising, fundraising or any other purpose.

• The situation you describe and both identity numbers are encrypted with AES-256-GCM before they are written to the database. The key is not held in the database, so anyone reaching it without the key sees meaningless text.
• Only verified, pre-approved administrator accounts can read requests. There is no self-registration for the admin area — accounts are created by hand. The restriction is enforced by the database itself, not only by the website.
• All traffic to and from the site is encrypted with HTTPS.
• System logs hold metadata only — when a request arrived and what became of it. The contents of the form, your name, phone and email are never written to any log.
• There is no Google Analytics on this site, no social-network pixels and no tracking cookies of any kind. We do not follow you around and we do not sell information to anyone.

The sensitive description and both identity numbers are deleted automatically twelve months after the request is closed. The remaining request details — including the address and the references' contact details — are kept for the charity's own records and reporting. You may ask for earlier deletion at any time.

The site runs on established infrastructure providers. They process the information on our behalf and may not use it for their own purposes:

• Supabase — the database and image storage.
• Vercel — website hosting.
• Resend — sending the emails you receive.
• Cloudflare Turnstile — checking that a form was submitted by a person. It was chosen specifically because it uses no tracking cookies and does not follow visitors across sites.

Beyond that we pass no information about applicants to anyone — not to donors, not to other organisations and not to the authorities, unless an explicit legal obligation requires it.

• To know what information is held about you.
• To correct anything that is wrong.
• To ask for your information to be deleted, including before the retention period ends.
• To withdraw a request you submitted and ask us to delete it.