Privacy Policy & Content Sovereignty

Effective date: 2026-10-03 · Last updated: 2026-10-03

Introduction

At reportage.news and our textual archival layer eport.news, we strictly operate on a privacy-by-design, client-held key architecture (GDPR Article 25). We do not maintain user accounts, profile databases, longitudinal activity histories, or commercial tracking profiles.

We do not store passwords, email directories, or telephone numbers. Control over published dispatches and discussion threads is managed through client-side cryptographic passkeys saved directly in your personal browser bookmarks.

Data Collection & Zero-Retention Mechanics

• Published Stories & Public Comments: When you publish a reportage or post a comment, we store only the public text, your chosen pseudonym or byline, and a timestamp. These contributions are attached solely to an anonymous, one-way cryptographic hash (SHA-256) rather than an identity dossier.
• Direct Editorial Correspondence: If you voluntarily email our editorial desk directly (privacy@reportage.news), your email address is used solely to reply to your inquiry and is never indexed, stored in comment databases, or shared with third parties.
• The Dual-Passkey Protocol (Tokens & Keys):
  • Author Tokens (Uploads): When submitting an article or .txt file via upload.php, your browser generates a private author token. This token unlocks editing rights and instant permanent deletion of your published story.
  • Comment Keys (Discussions): When commenting with notification alerts enabled, your browser creates a private reply key (?rnkey=). This key checks for new responses and allows you to edit or erase your comments.
• Vote Integrity (Heart Ratings): To ensure vote accuracy without tracking individuals, a temporary cryptographic hash is maintained strictly in a localized, rotating file solely to enforce one vote per visitor. This record is detached from user profiles and purged automatically.
• Ephemeral Server Diagnostics: Standard technical network headers (such as IP addresses and server request paths) exist temporarily in volatile web-server buffers solely for DDoS mitigation, rate limiting, and defensive security under GDPR Article 6(1)(f) (Legitimate Interests). These logs are scrubbed and truncated automatically on a 7-to-14-day cycle.

Cookies, Local Storage, and Tracking

We do not use tracking or advertising cookies. We deploy no third-party tracking pixels, behavioral scripts, cross-site trackers, or commercial advertising networks.

Any persistent state required to deliver notifications or remember your editing access exists solely within your local device (via standard browser localStorage or URL return parameters). Under the European ePrivacy Directive, functional local storage used strictly to deliver features explicitly requested by the visitor is categorized as strictly necessary and is exempt from cookie consent banner requirements.

How Information Is Handled

• Transactional Discussion Alerts: Checking and delivering new replies matching your public hash when you revisit your bookmark passkey.
• Author & Reader Bridge: Notifying writers when readers comment on their dispatches, and notifying readers when authors reply, with zero identity exposure on either side.
• Direct Support: Addressing technical or editorial questions submitted directly by you.
• Platform Security: Mitigating denial-of-service traffic, preventing automated spam injection, and ensuring uptime.
• Stateless Integrity: Running automated maintenance cycles that clear temporary server caches and rotate security logs.

Sharing and Third Parties

We do not sell, rent, monetize, or trade user data. Public comments and articles are visible to readers as intended by publication. We never share personal dossiers or analytical tracking profiles with third parties.

Your Legal Rights & Self-Serve Erasure (GDPR & CCPA/CPRA)

Under international data protection laws—including the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA)—you hold fundamental rights regarding your data:

• Right to Erasure / Right to be Forgotten (GDPR Art. 17): You hold the absolute right to have your content permanently deleted. Because you hold your Author Token or Comment Key in your browser bookmark, you do not need to file a support ticket or submit government ID. Simply load your return link and select "Delete" or "Permanently Erase" to instantly purge your contribution from the live database.
• Right to Rectification (GDPR Art. 16): You may correct, edit, or update your published articles or comments at any time using your private return passkey.
• Right of Access (GDPR Art. 15) & Portability (GDPR Art. 20): All data associated with your token is already fully accessible to you directly in your browser. Because we maintain no hidden accounts or personal profiles, an access request confirms that no external personal records exist.
• Right to Object & Restrict Processing (GDPR Arts. 18 & 21): You may cease receiving replies or participating at any time by simply closing the tab or clearing your browser's local bookmark.
• Right to Lodge a Complaint (GDPR Art. 77): You hold the right to lodge a formal complaint with a competent Data Protection Authority (such as the Swedish Integritetsskyddsmyndigheten (IMY) or your local EU supervisory authority) if you believe our data processing breaches applicable law.
• The Nature of Lost Keys: Because we collect zero backup emails, phone numbers, or recovery passwords, your bookmark passkey is your sole cryptographic proof of authorship. If you clear your browser history without saving your link, self-serve editing and erasure become technically impossible. Manual deletion requests can be addressed to our privacy desk with reasonable verification of origin.

Editors here hold the exclusive right to curate and select uploaded submissions, from url:eport.news, for publication at reportage.news. This editorial oversight is exercised solely to uphold rigorous textual quality, protect publication standards, and prevent irrelevant or unsuitable content from appearing on the platform. At reportage.news the readers can appriciate the content and create a giving discussive environment.

International Transfers, VPNs, and Proxies

Because we do not build identity registries or geolocate requests, reportage.news is fully compatible with VPNs, privacy proxies, and Tor routing. Your access remains untracked regardless of where your traffic originates.

Children’s Privacy

Our service does not knowingly collect, process, or retain personal data from children under 13 years of age (or under 16 where applicable by regional law).

System Architecture: The Philosophy & The Bookmark

Because our server stores no master password list or email directory, your browser bookmark is your physical receipt. Save or copy your current return link below to preserve your author editing rights or reader notification keys across sessions:

Contact

For questions regarding our privacy architecture, contact: privacy@reportage.news.