Privacy notice

Controller

Data categories

• Account and profile data such as email address, display name, username, and avatar.
• Publishing data such as posts, edits, drafts, moderation state, comments, and reports.
• Reader interaction data such as bookmarks, likes, view events, and discussion activity.
• Technical data such as IP-related request data, timestamps, and security or error logs.

Purposes and legal bases

• Providing login, account, publishing, and moderation functions.
• Operating the service securely, preventing abuse, and documenting moderation actions.
• Displaying public author profiles, posts, comments, and engagement where users choose to publish.
• Complying with legal obligations and handling notices relating to illegal or infringing content.

Recipients and processors

• Google, where users sign in through Google OAuth.
• Vercel, which hosts the application and related runtime infrastructure.
• Neon, which provides the application database.

Retention

Account, publishing, and moderation data are retained for as long as required to operate the service, to preserve public content, to document moderation decisions, or to comply with legal obligations. Technical logs are retained only as long as needed for security, stability, and troubleshooting.

Rights

Data subjects may request information, rectification, deletion, restriction of processing, objection, and data portability where applicable. You may also lodge a complaint with a competent supervisory authority.

Cookies and session technologies

HeadlineLoop uses technically necessary session and security-related technologies to provide login and core service functions. If additional non-essential tracking technologies are introduced later, they should only be activated on the basis required by applicable law.