Privacy Policy

Reading and local saves

Public pages require no account. Theme, language and a saved list may be stored in your browser. A local saved list is not transmitted unless a feature explicitly says it syncs.

Accounts and submissions

Optional accounts store an email address, password hash and display name. Story and prediction forms store the information you submit, moderation state and an audit record. Public attribution is separate from the private account identity.

Evidence files are private and quarantined by default. Contact details are not published.

Newsletter and contact

Newsletter signups store the address, requested topic, source page and time. Contact and report forms store the message needed to respond or investigate. Every newsletter must include an unsubscribe route before sending begins.

Security and retention

Passwords are one-way hashed. Session cookies are HttpOnly, Secure in production and SameSite Lax. Operational logs may include network and browser information for abuse prevention. Retention schedules and the final data controller contact must be confirmed before commercial launch.

Analytics

We use Google Analytics 4 to count page views and understand general usage. It records pages visited, referring site, approximate location derived from your IP address, device and browser type, and sets first-party _ga cookies with a random identifier. Advertising features are disabled. Google processes this data as described in its own privacy policy; see the Cookies page for how to block it.

Advertising cookies

No advertising tag loads when no publisher ID is configured. If advertising is enabled, the consent controls and vendor disclosures will appear before personalized advertising storage is allowed.