Privacy Policy

1. Data we collect

• Account data: when you register we store your email address and, if provided, your name. For email/password accounts we store a securely hashed password — never the password itself. If you sign in with Google, we receive your name, email address, and profile picture.
• Subscription and billing data: payments are processed by Stripe. We never see or store your card details; we store your Stripe customer ID and your subscription status, plan, and renewal date.
• Activity data: community votes you cast on outlet bias (linked to your account) and aggregate story view counts.
• Preferences: your language, country, theme, and interests are stored in your browser, not on our servers.
• Technical data: your approximate country (from your IP address) to pick a default region and language, and standard server logs.

2. How we use your data

• To create and operate your account and keep you signed in.
• To provide the Supporter subscription and process payments.
• To send essential emails (verification, password reset, billing notices).
• To enable community voting and personalize your experience.
• To secure, maintain, and improve the Service and comply with the law.

3. Legal bases (GDPR)

Where the GDPR applies, we process your data to perform our contract with you (your account and subscription), for our legitimate interests (security, abuse prevention, improving the Service), with your consent where required, and to meet our legal obligations.

4. Cookies and local storage

We use a strictly necessary cookie to keep you signed in, and we store your preferences (language, country, theme, interests) in your browser. We do not use advertising cookies.

5. Service providers

We share data only with the service providers that operate the Service, who act on our behalf under their own security commitments. We do not sell your personal data. These providers are:

• Vercel — application hosting.
• Neon — managed PostgreSQL database.
• Stripe — subscription payments.
• Resend — transactional email delivery.
• Google — optional sign-in (Google OAuth).

6. International transfers

Some providers process data outside the EEA (for example in the United States). Where they do, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

7. Data retention

We keep your account data for as long as your account exists. Aggregated news content older than about one month is automatically purged. If you delete your account, we delete or anonymize your personal data, except limited records we must keep by law (for example billing records).

8. Your rights

Subject to applicable law, you have the right to access, correct, delete, or export your data, to restrict or object to processing, and to withdraw consent at any time. To exercise any of these, email privacy@objective-news.org. You may also lodge a complaint with your local data protection authority.

9. Security

We use industry-standard measures including encryption in transit (HTTPS), hashed passwords, and access controls. No method of transmission or storage is perfectly secure, but we work to protect your data.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy from time to time. We will revise the date above and, for material changes, take reasonable steps to notify you.

12. Contact

Questions or requests: privacy@objective-news.org.