Privacy Policy

1. Introduction and scope

This policy explains how Dawwama (dawwama.com) handles information when you visit this website. It covers this website only. Dawwama publishes exchange-rate and precious-metal reference numbers for Iraq; it is an information site. We do not sell currency, gold or any other asset, we do not execute transactions, and we do not offer financial advice.

Dawwama is a static publication. There are no user accounts, no login, no comment system, no newsletter sign-up and no contact form. There is nothing on this site for you to fill in, and consequently no personal data for you to submit to us.

2. Summary — what we do and do not collect

In plain terms:

• We do not ask you for any personal information. No accounts, no forms, no sign-ups.
• We do not use analytics. There is no Google Analytics or comparable visitor-tracking product on this site.
• We show advertising supplied by Google AdSense, and Google and its partners may set cookies for that purpose (see sections 5 to 7).
• We do not sell or share personal information for money or for cross-context behavioural advertising.
• Our hosting and security provider records standard technical logs — the ordinary record every web server keeps in order to serve a page and resist attack (see section 4).

3. Who we are and how to contact us

This website is operated under the name Dawwama. For any privacy question, or to exercise the rights described in sections 12 and 13, write to us at [email protected]. This address is the contact point for all data-protection matters.

4. Information we collect

We do not collect information from you directly. However, like every website, serving a page requires our infrastructure to process certain technical data automatically. This consists of:

• Server and network logs — your IP address, the date and time of the request, the page or file requested, the HTTP status returned, your browser's user-agent string, and the referring page where your browser sends one.
• Security telemetry generated by our content-delivery and security provider in order to distinguish automated abuse from genuine visitors.

This data is processed to deliver the site, keep it available, and defend it against attack. It is not used to build a profile of you, is not combined with any other source, and is not used for advertising.

5. Cookies and similar technologies

Dawwama sets no cookies of its own for tracking or analytics. The site is static: the rates you see were computed before your visit, so nothing needs to be remembered about you between page loads.

Cookies and similar storage are used on this site in only three ways:

• Advertising cookies set by Google and its partners, described in sections 6 and 7.
• Strictly necessary security cookies set by Cloudflare, our content-delivery and security provider — for example a bot-management cookie whose sole purpose is to tell human visitors from automated traffic and protect the site. These are not tracking or advertising cookies and are not used to profile you.
• One entry in your browser's local storage recording your advertising choice from the consent notice, so we do not ask you again on every page. It contains only that choice and no identifier.

You can block or delete cookies in your browser settings at any time. Blocking them will not affect your ability to read the rates.

6. Advertising: Google AdSense and third-party vendors

This site is funded by advertising. We use Google AdSense (publisher id pub-6677365919252714) to display advertisements.

Google, as a third-party vendor, uses cookies to serve advertisements on this site. Google's use of advertising cookies enables it and its partners to serve advertisements to you based on your visit to this site and/or other sites on the internet. Third-party vendors and advertising networks may also use cookies, web beacons or similar technologies to collect information such as your IP address, device and browser characteristics, the pages you view and the advertisements you see or interact with, in order to select, deliver, measure and report on advertising.

We do not receive, store or have access to the advertising identifiers or profiles these vendors use. We do not provide any advertiser with information about you.

Advertisements are placed only between sections of the page. They are never placed inside the rate cards themselves, so an advertisement can never be mistaken for one of our published numbers.

You can review how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

Google publishes the list of ad technology providers that may serve advertisements on this site: Google's list of ad technology providers.

7. Your advertising choices, consent and opt-out

Personalised advertising is off by default on this site. Until you choose otherwise, we instruct Google to serve only non-personalised advertisements.

Visitors are shown a notice offering a choice between personalised and non-personalised advertising. Your choice is stored in your browser (section 5) and you can change it at any time by clearing your browser storage for this site, which makes the notice appear again. This is an interim control operated by us; it is not a Google-certified Consent Management Platform, and we will deploy a certified CMP before serving personalised advertising to visitors in the European Economic Area, the United Kingdom or Switzerland.

We honour the Global Privacy Control (GPC) browser signal: if your browser sends GPC, advertising on this site is forced to non-personalised automatically and no consent notice is shown.

You can also opt out of personalised advertising independently of this site:

• Google Ads Settings — google.com/settings/ads
• Digital Advertising Alliance — www.aboutads.info/choices
• Your Online Choices (Europe) — youronlinechoices.eu

8. Content delivery and security (Cloudflare)

This site is delivered through Cloudflare, which provides content delivery, DNS, TLS encryption and protection against denial-of-service and other attacks. To perform these functions, Cloudflare processes the connection data described in section 4 on our behalf, acting as our service provider. Cloudflare operates a global network, so requests are handled by the location best able to serve them.

9. How we use information, and our legal bases

10. Sharing, recipients and international transfers

We do not sell personal information for money. The recipients of data described in this policy are: Cloudflare, our content-delivery and security provider; our hosting provider, on whose server the site runs and whose systems handle the same connection data; and Google, which receives advertising-related data directly from your browser as an independent controller for the purposes described in section 6. Cloudflare and the hosting provider act on our behalf and under contract. We do not pass any information about you to advertisers ourselves.

Because that provider operates internationally, connection data may be processed outside your country, including in the United States. Such transfers rely on the safeguards permitted by applicable data-protection law, including the European Commission's Standard Contractual Clauses.

11. Data retention

Technical logs are kept only as long as needed for security, abuse prevention and fault diagnosis — ordinarily a short rolling window measured in days or weeks — and are then deleted or overwritten. We keep no database of visitors, because we collect none.

12. Your data-protection rights

Depending on where you live, you may have the right to request access to the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. Where processing rests on consent, you may withdraw that consent at any time.

To exercise any of these rights, write to [email protected]. Please note an honest practical limit: because we hold no accounts and no identifying records, we usually cannot connect a raw IP address in a short-lived security log to a particular person. Where we genuinely cannot identify you from the data we hold, we may be unable to action a request — we will always explain the position rather than ignore you. If you are in the EEA or the UK you also have the right to complain to your national data-protection authority.

13. California privacy rights (CCPA/CPRA)

If you are a California resident: we do not sell your personal information for money. Personalised advertising may constitute “sharing” for cross-context behavioural advertising under California law; it is OFF by default here, and a GPC signal or a “reject” choice keeps it off. We do not knowingly collect the categories of sensitive personal information defined by California law. You have the right to know what personal information is collected, to request deletion or correction, and not to be discriminated against for exercising those rights. Requests go to the address in section 3.

Our site honours the Global Privacy Control (GPC) browser signal: when GPC is present, advertising is forced to non-personalised automatically. Some privacy laws treat personalised advertising as a “sale” or “share” of personal information; where that applies, GPC and the consent notice in section 7 are the mechanisms by which you opt out.

14. Children

This site publishes financial reference information and is not directed at children. We do not knowingly collect personal information from children.

15. Changes to this policy

If this policy changes, we will publish the revised version here and update the date shown at the top of the page. Material changes will be reflected here before they take effect.

16. Contact

Questions about this policy or about privacy generally: [email protected].

Dawwama publishes measured reference rates for information only. Nothing on this site is an offer to buy or sell any currency, metal or other asset, and nothing on it is financial advice.