Privacy policy

Last updated 30 September 2026

You can read everything on [BRAND] without an account. This policy explains what we collect when you visit or sign in, what our service providers and advertising partners collect, and the choices you have.

[BRAND] is operated by [OPERATOR LEGAL NAME, ABN] (“we”), New South Wales, Australia. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles and, for visitors in the European Economic Area and the United Kingdom, the GDPR and UK GDPR. Contact: [contact@yourdomain].

1. Information we collect

If you just read

Technical data your browser sends with every request — IP address, browser type, the page requested and the time. Our host keeps it in short-lived server logs, and we count requests per IP address in memory for a few minutes to stop abuse.
Preferences you set: light/dark theme (stored in your browser only), and the region and currency you choose (small cookies, kept for a year).
We do not use analytics or tracking tools of our own.

If you sign in

From Google Sign-In: your email address and, where Google provides them, your name and profile picture. We ask Google only for your identity; we never receive your password or access your Google data.
Your activity on the site: stories you save, sections and events you follow, and which stories you open (reading history, used for the personalised feed and “most read”). Stories — and the saves and reading history attached to them — are deleted automatically when they leave our 7-day window.
QR sign-in: a description of the browser asking to sign in (so you can recognise it on your phone). These requests expire after two minutes.

2. Cookies and similar technologies

Essential: a session cookie that keeps you signed in (up to 30 days), and short-lived security cookies used during sign-in.
Preferences: region and currency choices (1 year); theme in your browser's local storage.
Advertising (when ads are shown): cookies set by Google and its partners — see section 4.

You can delete or block cookies in your browser settings; blocking essential cookies will stop sign-in from working.

3. How we use information

to run the site, keep you signed in and remember your settings;
to personalise your feed and show what is most read;
to keep the service secure and prevent abuse;
to answer you when you contact us.

We do not sell personal information. The text our AI features process is public news content only — no personal information of readers is sent to AI providers.

4. Advertising

We may show advertising provided by Google AdSense. When ads are shown:

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this and/or other sites on the internet.
You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at aboutads.info/choices (or youronlinechoices.eu in Europe).
Learn more in How Google uses information from sites or apps that use its services.
Visitors in the EEA, the UK and Switzerland are asked for consent through a Google-certified consent message before personalised ads or their cookies are used, and can change that choice at any time from the privacy link it provides.

Some links may be affiliate or partner links, which can pay us a commission if you subscribe or buy. They never change what we cover or how an AI Insight is written.

5. Who else handles data

Vercel — hosting and delivery (servers in Sydney, global content network).
Supabase — our database (Sydney, Australia).
Google — sign-in, and advertising when shown.
Google and DuckDuckGo icon services — outlet icons next to stories load from these services, which receive your IP address and the outlet's domain when your browser fetches them.
AI providers (Anthropic, Google or OpenAI) — process public news text only, never reader data.

Some of these providers are based in, or may process data in, countries other than your own, including the United States. We rely on their contractual safeguards (such as standard contractual clauses) for those transfers.

6. How long we keep it

Account details: until you ask us to delete your account.
Saves and reading history: at most 7 days (they go with the story).
Sessions: up to 30 days; QR sign-in requests: minutes; server logs: per our host's short retention.

7. Your rights

You can ask to access, correct or delete your personal information, object to or restrict how we use it, or receive a copy of it. Email [contact@yourdomain] from the address you sign in with; we respond within 30 days. If you are unhappy with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or, in Europe or the UK, your local data protection authority.

8. Children

[BRAND] is a general news service not directed at children under 16, and we do not knowingly collect their personal information.

9. Security

Data is encrypted in transit, the database is closed to public access, sign-in uses Google's OAuth, and secrets are never exposed to browsers. No system is perfectly secure; if we become aware of a breach affecting you, we will notify you and the regulator as the law requires.

10. Changes

We will post any changes here and update the date above; significant changes will be highlighted on the site. See also our terms of use.