Legal
Privacy Policy
You can read every story without an account. We collect only what a feature you choose needs plus anonymous usage statistics, we never sell your data, and we don't run ads.
What we collect, and why
If you create an account
- Email address and name — to sign you in and, if you ask for it, send your daily email.
- Password — stored only as a salted scrypt hash; we can't see it.
- Preferences — the topics, time and timezone you pick for the daily email, and your home place.
- Account activity — when you joined and last signed in, to keep the account secure.
If you use local news
- When you tap “Use my location”, your browser gives us its position once. We round it to about 1 km, ask OpenStreetMap's geocoder which county that is, and keep only the county or town — never your coordinates.
- The places you choose are kept in a cookie on your device (and your home place on your account if signed in).
If you turn on notifications
- Your browser gives us a notification address and encryption keys for that device, and we store the topics you ticked. Turning notifications off — or the browser expiring the address — deletes that record.
On every visit
- Cookies: a sign-in session cookie (only when signed in), your chosen places, and Google Analytics cookies (see below). No advertising cookies.
- On your device only: light/dark theme and saved stories are kept in your browser's storage; they never reach us.
- Security: failed sign-in attempts are counted per network address for 15 minutes to stop password guessing. Our hosting provider keeps standard request logs.
Usage statistics (Google Analytics)
- We use Google Analytics 4 to understand which stories and features are used — pages viewed, how far you
scroll, searches, and which buttons and links are clicked (for example share, save, category and place choices).
It sets first-party cookies (
_ga,_ga_*) and Google receives your network address, which GA4 doesn't store. We don't send your name, email or account details to Google. - Your choice: analytics cookies are only set if you press Accept in the cookie banner. Until then — or if you press Reject — Google Analytics runs in a cookie-free mode that only sends anonymous counts. Change your cookie choice at any time.
- Opting out completely: turn on Global Privacy Control in your browser (we then don't load Google Analytics at all), block cookies for this site, or use Google's opt-out add-on.
What we don't do
- No ads and no advertising trackers. Open and click tracking is switched off in our emails.
- We don't sell, rent or share your personal data for marketing.
- Your data isn't used to train AI models. Jessi writes from public news reports, not from anything about you.
Who processes data for us
- Railway — hosting and database.
- Cloudflare — domain, security and delivery of the site.
- Twilio SendGrid — sends the daily email (your email address and the email's contents).
- OpenStreetMap Nominatim — turns a rounded position or the city/ZIP you type into a county.
- Your browser's push service (Google, Mozilla, Apple or Microsoft) — delivers notifications to your device.
- Google Analytics — anonymous usage statistics (see above).
- Google Fonts — serves the site's typefaces, which means Google sees your network address when fonts load.
How long we keep it
- Account data: until you delete your account. Deletion is immediate and removes your profile, preferences, places and notification devices.
- Notification devices: until you turn them off or the browser retires the address.
- Security counters: 15 minutes, in memory. Hosting logs: per the provider's retention.
Your choices and rights
- Download your data or delete your account at any time on your account.
- Stop the daily email with the one-click link in any email, or on your account.
- Turn off notifications on the Notifications page or in your browser.
- Depending on where you live (for example California, Virginia, Colorado, or the EU/UK), you may have rights to access, correct, delete or port your data and to object to processing. We honour these requests for everyone — email [email protected].
Children
The Daily Consensus isn't directed to children under 13, and we don't knowingly collect their personal data. If you believe a child has created an account, contact us and we'll delete it.
Security
Connections are encrypted (HTTPS), passwords are hashed, API keys are stored only as hashes, and access to the newsroom is limited by role. No system is perfectly secure; tell us at once if you notice anything wrong.
Changes and contact
We'll update this page when our practices change and change the date at the top; significant changes will also be announced on the site. Questions or requests: [email protected] · Quantum Forge Robotics.