Skip to main content
tzav8עברית

Privacy Policy

Last updated: 19 August 2026

tzav8 (צו 8) is a service that files your daily reserve-duty presence report ("דיווח נוכחות") on the IDF reserve-duty site for you, with your authorisation and on your own account. To do that, the service needs a small amount of personal information. This page explains exactly what is collected, what happens to it, where it is stored, and how to delete it.

This is written in plain language on purpose. If anything is unclear, just ask: tzav8@langerapp.com.

Who runs the service

The service is run by Max Langerman as a personal, non-commercial project. There is no company behind it, no team, no privacy department and no data protection officer — just one person you can email directly at tzav8@langerapp.com.

Wherever this document says "I", it means the operator of the service.

Service address: https://tzav8.langerapp.com

What the service does

Once a day, on your behalf and on your own account, the service signs in to miluim.idf.il and submits your daily presence report. Signing in to that site uses a one-time password (OTP) sent by email, so the service needs temporary access to that code only — in the way described below.

The service is not affiliated with, endorsed by, or connected to the IDF, the Israeli Ministry of Defense, or the operators of the reserve-duty site in any way. See the Terms of Service for the full statement.

What information is collected

This is the complete list, and why each item is needed:

Data Why it is needed
Name and email address from the Google or Facebook account you sign in with To identify your account and to email you updates about your reports
Your Israeli ID number (תעודת זהות) It is the required field in the reserve-duty site's sign-in form; reporting is impossible without it
The email address associated with your miluim.idf.il account To confirm that the one-time password really came from you, and to give you the right guidance if forwarding is misconfigured
Your reserve-duty date range To know which days to report on and when to stop
A log of each report attempt (date, success or failure, and the reason for a failure) So you can see what happened each day, and so faults can be diagnosed

What is not collected: no passwords. Sign-in happens only through Google or Facebook (via AWS Cognito), so no password of yours is ever stored — neither for those accounts nor for the reserve-duty site, which itself uses one-time codes rather than a password.

There is no advertising in the service, your data is never sold, and it is never used for marketing.

How your ID number is protected

This is the most sensitive item the service holds, so it is handled differently from everything else:

  1. Encrypted in your browser. Your ID number is encrypted on your own device using an AWS KMS public key before it is sent anywhere. The readable value never leaves your browser.
  2. Stored only as ciphertext. Only the encrypted form is written to the database. In any admin view it appears as a meaningless string of characters.
  3. Only one automated process can decrypt it. The encryption key's policy grants decryption rights to the single automated worker process that files your report, and explicitly denies them to every human identity — including mine. I have no way to see your ID number.
  4. Every decryption is logged. Each decryption is recorded in AWS CloudTrail, producing a complete, tamper-evident record of every use of the data.
  5. Never written to logs. The ID number is not written to log files, does not appear in the diagnostic screenshots the system keeps, and is never stored in plaintext in backups.

One honest caveat: to type the number into the form on the reserve-duty site, the automated process must hold it in memory for that moment. That is the single unavoidable technical limitation. It exists only at that instant and only inside that process — the number is not saved, displayed, or logged at any point.

Your dedicated email address

When you sign up, the service issues you a unique email address at @tzav8.langerapp.com. It exists for exactly one purpose: to receive the one-time password message that you forward to it from your own mailbox, sent by no-reply@otp.digital.idf.il.

  • Automatic protection: if any other sender emails that address, the service automatically disconnects it, stops your reports, and notifies you. It is only reconnected when you choose to, with a new address.
  • What is kept: only metadata (sender address, timestamp, and how the message was classified). Message contents are not kept — raw messages are automatically deleted after 7 days.
  • The forwarding rule itself lives in your own mailbox, under your full control, and you can remove it at any time.

Where your data is stored — and the transfer abroad

The service runs on Amazon Web Services (AWS) infrastructure:

  • Data storage: all data is stored in the us-east-1 region — Northern Virginia, United States.
  • The component that reaches the reserve-duty site: the automated process that actually connects to miluim.idf.il runs from the il-central-1 region — Israel.

Please note: this means your personal data — including your encrypted ID number — is transferred to and stored outside Israel, in the United States. By using the service you consent to that transfer. Data is encrypted in transit (TLS) and at rest.

Who your data is shared with

Your data is not sold and is not passed to third parties for commercial purposes. Only three parties are involved in the normal operation of the service:

  • Amazon Web Services — the infrastructure provider the service runs on (storage, database, email delivery, encryption).
  • Google or Facebook — whichever you choose, for sign-in only. They provide your name and email address to the service, and their own privacy policies govern what happens on their side.
  • The reserve-duty site miluim.idf.il — which receives the details you would otherwise enter yourself when reporting, submitted on your behalf and with your authorisation.

Beyond that, data may be disclosed if there is a legal obligation to do so, for example under a court order.

How long data is kept

  • Account details and reserve-duty data — for as long as your account is active.
  • Raw email messages — automatically deleted after 7 days.
  • Report attempt logs — kept while your account is active, so you can review your history.
  • After you delete your account — data is deleted immediately, and backups and technical logs are cleared within 30 days at most.

Your rights

At any time you may:

  • Access the information held about you and receive a copy of it.
  • Correct inaccurate information — most details can be edited directly in your account settings.
  • Delete your account and all data held about you, with one click in account settings or by emailing me.
  • Stop the service without deleting your account, simply by stopping the reports or removing the forwarding rule from your mailbox.

The full deletion process is described on the Account and Data Deletion page.

To exercise any of these rights, or for any question about them, write to me at tzav8@langerapp.com.

Security

The service is built to hold as little sensitive data as possible: end-to-end encryption of the ID number, least-privilege permissions for every component, encryption of all traffic and storage, and audit logging of data access. That said, no online service is completely immune, and absolute security cannot be guaranteed.

Age requirement

The service is intended for adults only — 18 and over. Reserve duty implies adulthood in any case, so the service holds no information about minors and does not seek to collect any.

Cookies and local storage

The service uses cookies and browser local storage for operational purposes only: keeping you signed in and remembering your language preference. There are no advertising cookies and no tracking of your browsing on other sites.

Changes to this policy

If this policy is updated, the date at the top of the page will change. If there is a material change to how your data is collected or stored, you will be notified at your account email address.

Contact

For any question, request, or complaint about privacy: tzav8@langerapp.com

Back to the home page