Privacy Policy

Account information. If you create an account: your email address, a username, and a password, which we store only as a salted hash. If you sign in with Google or Apple we receive the name and email those services share and an identifier for your account with them.

Content you post. Comments you leave on news stories, and any edits or deletions of them.

Preferences. Your notification settings, theme choice, and analytics opt-out.

Technical data. Server logs with your IP address, browser type, the pages requested and timestamps, kept for security and debugging. Cookies for your session and for protection against request forgery (see our Cookie Policy).

Analytics. Visits are measured with Google Analytics, with its advertising features turned off, only where you have allowed it. Our server also records a few product events, such as signing up, signing in and searching, in PostHog, tied to an internal account id and never to your name or email. Those events are sent by our server, not your browser, and set no cookies; turning off Usage Analytics in Settings stops them for your account.

• To run the site: sign you in, show your comments, remember your settings.
• To send the emails you asked for: a notification when a broadcast airs, account and security messages. Every notification email has an unsubscribe link and a Settings toggle.
• To keep the site safe: rate limiting, abuse and spam prevention, moderation of comments.
• To understand what works: aggregate analytics, where you have allowed it.

We do not use your information to train models, and the summaries and scripts in the broadcast are generated from published news articles, not from anything you post.

We share personal information only with the service providers that run the site on our behalf, under contracts that limit their use of it: our hosting provider, our email delivery provider (for the notifications you asked for), our error-monitoring service (which receives technical error reports), Google Analytics where you have allowed it, and PostHog for the product events described above unless you have turned off Usage Analytics in Settings. Ads on the site, when shown, are served by Google AdSense under Google's own policies; we do not pass them your account information.

Your public comments are public: anyone can read them alongside the story. We disclose information when the law requires it or to protect the rights and safety of users and the public. If the service changes hands, this policy travels with your data.

We set a session cookie so you stay signed in and a token cookie that protects forms against forgery. Both are essential and cannot be turned off without breaking the site.

Google Analytics sets optional cookies only where you have allowed it: in the EU/EEA, the UK and Switzerland we ask first, and everywhere you can refuse with Cookie settings at the bottom of every page. The site does not show ads or set advertising cookies.

Our Cookie Policy lists every cookie by name, with its purpose and how long it lasts.

• Access and export. Settings lets you download your account data as a file.
• Correction. Edit your username, email and comments at any time.
• Deletion. Delete your account from Settings; see Data Deletion Instructions for what is removed and how quickly.
• Opt-outs. Analytics can be refused with Cookie settings at the bottom of every page or in Settings, and each kind of email can be turned off in Settings.

If you are in the EEA, the UK, California or another place with a data-protection law, these are the rights those laws give you, and you can also complain to your local authority. Write to us at the address below to exercise any right you cannot exercise from Settings.

Account data is kept while your account exists and removed when you delete it. Server logs are kept for up to 90 days. Aggregate statistics that identify no one may be kept indefinitely.

Traffic is encrypted in transit, passwords are hashed, access to production systems is limited to the people who run the site, and two-factor authentication is available for your account. No system is perfectly secure; if we learn of a breach affecting you we will tell you as the law requires.

Paranormal Daily is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child has created an account, contact us and we will remove it.

We will post changes to this policy here and update the date at the top; material changes will also be announced to account holders by email. Questions or requests: info+paranormal@greenrobot.com.