OSINT Navigator is an AI-powered tool finder for open-source intelligence researchers. It is operated by Indicator Media and Buried Signals, registered in Amsterdam and Zurich respectively.
AI-generated content
Recommendations are produced by a language model grounded in our open tool database. In the default mode, a cloud-hosted language model generates answers. In local mode, our fine-tuned model writes the answer in your browser via WebGPU when no cached answer exists. Your question is still sent to our server, which searches the tool database, but it is not sent to a cloud-hosted language model. AI output can be incomplete, outdated, or wrong. Do not treat recommendations as professional advice. Always verify tool suitability and legality in your jurisdiction independently.
Use
Use the service in good faith. Don't attack it, don't abuse it, don't use it for illegal purposes. We reserve the right to suspend access.
Liability
Provided as-is, without warranties of any kind. Not liable for damages arising from use of the service or reliance on its recommendations, to the maximum extent permitted by Swiss law.
Governing law
Swiss law. Jurisdiction: Zurich.
Privacy
The short version
We designed OSINT Navigator to collect as little personal data as possible. We don't track you, we don't profile you, and we don't sell anything about you.
Authentication
When you sign in, we send a one-time link to your email through our email provider, Resend, and check your membership with our newsletter provider, beehiiv. Your address is kept with the link only until you use it; unused links are deleted within two days. After that we keep only a one-way cryptographic hash of your email, which cannot be reversed to recover the address.
When you use the service
Queries are used to search our tool database and, in default mode, sent to a cloud-hosted language model (via OpenRouter) to generate recommendations. In local mode ("Run locally" toggle), the answer is written in your browser when no cached answer exists, and your question is sent to our server only to search the tool database, not to OpenRouter. Answers may be cached for future users. Neither queries nor cached answers are linked to your identity.
Votes on answers are stored with the hash of your email, so each account votes once; they can be deleted on request. Survey responses are stored with a hashed network address, a session ID, and any text you write, but not with your account.
Fonts on our pages load from Google Fonts, which receives your network address.
One session cookie (HTTPOnly, 30 days) keeps you signed in. It contains a cryptographic hash, not your email.
What we don't do
No analytics or tracking scripts
No third-party cookies
No advertising or profiling
No selling or sharing of personal data beyond the service providers named in this policy
Your data
Data linked to your email hash (membership status, API keys, sign-in sessions, connected apps, and usage counts) can be deleted on request. Email tom@buriedsignals.com (see Support).
Applicable law
Swiss Federal Act on Data Protection (FADP). Zurich, Switzerland.
ChatGPT plugin
This section covers the OSINT Navigator plugin for ChatGPT and Codex, and any other AI app a member connects to Navigator's MCP server. It describes the tools available to members; administrator-only preview tools are outside this section. The rest of this policy also applies.
What Navigator receives
Only the inputs ChatGPT sends when it calls a Navigator tool: your question or search terms, an optional category, or a tool ID. Navigator does not receive your ChatGPT conversation, files, or location.
Signing in
You connect on a Navigator sign-in page, either with an email link (handled as described under Authentication above) or with a Navigator API key you created. The plugin never asks for passwords or API keys in the conversation.
We keep your membership status and beehiiv subscription ID against the one-way hash of your email, not the address.
For each connection we store the app's registration (its name and return address, supplied by the app), short-lived sign-in attempts and authorization codes (valid for minutes, deleted within three days), and hashed access and refresh tokens linked to your email hash. Access tokens expire after 24 hours and refresh tokens after 30 days. Tokens are deleted at the first daily cleanup more than 7 days after they expire or are revoked, and registrations with no remaining tokens at the first cleanup after 30 days. A connection made with an API key ends when you delete that key.
To limit abuse, sign-in attempts are counted per hashed network address and email hash. These counters are deleted within two days.
How your requests are used
Questions are handled as on the website. They are searched against our tool database and, when relevant, Indicator Media's member archive, then sent to a cloud language model via OpenRouter together with the matching tools or archive excerpts to write the answer. Questions from Osaurus (Indicator Lab's local agents) are not sent to OpenRouter: when no cached answer exists, the agent on your computer writes the answer from the matching tools and archive sources.
Shared answer cache: the question, the answer, a numerical representation of the question used for matching, and timestamps are saved without any account identifier, and can be served to other users who ask a similar question. Entries not served for 60 days are deleted weekly. Asking for a fresh answer can replace a lower-rated cached answer to the same question. Don't include personal information in questions.
Usage counts: we count your questions per day against your daily limit, linked to your email hash and reset at 00:00 UTC. We keep daily totals by app type, plan, and sign-in method, and a per-day pseudonymous user record that is deleted after 90 days.
Service logs kept by our hosting provider, Render, can include request paths, network addresses, and the first characters of your email hash. They are kept for at most 30 days.
What ChatGPT receives
Tool results: answers, recommended tools with links, citations of Indicator Media articles when relevant, tool documentation, the list of catalog sources, and your plan and remaining daily questions. Results contain no email address or account identifier. OpenAI's privacy policy covers how ChatGPT handles them.
Your controls
Disconnect Navigator in ChatGPT's settings at any time. Delete API keys under API on the Navigator website.
To end a connection immediately, or to ask about or delete data linked to your email hash, email tom@buriedsignals.com.