Privacy
CSPNews keeps as little about you as it can. Reading needs no account, and nothing on this site tracks you.
When you read
No analytics, no ad trackers and no third-party scripts. Fonts, photos and logos are served from this site.
Your settings, the stories you have read and your word game results are kept in your own browser (local storage). They never leave it unless you sign in.
The site is hosted by Vercel. Like any web host, it handles your IP address to send you the pages. We do not keep logs of it.
If you sign in
An account is optional. Google sign-in asks Google for an account number only: no email, no name, no photo. A passkey stays on your device; we keep only its public half. This is everything we keep:
- Account id
- A random id we createTies your account together
- Google link
- Google’s account number for you, if you use GoogleRecognise you next time
- Passkeys
- The public half of each passkey, with the dates it was added and last usedSign in without a password
- Name
- Optional, whatever you type. Only you see it.Your account page
- Avatar
- Which avatar you pickedThe header and account page
- Settings
- Interface language and themeThe same site everywhere
- Word game
- One row per day and language: tries, and whether you found the wordYour streak and stats on every device
- Sign-ins
- A scrambled (hashed) copy of each sign-in token, and when it expiresKeep you signed in for up to 90 days
Never
- Email address or phone number
- Passwords
- Birthday, gender or location
- Logs of your IP address
- Analytics or advertising
- Selling or sharing your data
Cookies
- Sign-in
- A random token, readable only by our serverKeeps you signed in. Up to 90 days.
- Signed-in hint
- Just “1”Tells the site to ask for your account, so signed-out readers never contact our server
- Sign-in in progress
- A one-time code while Google or your passkey answersProtects the sign-in. Gone after 10 minutes at most.
These are only set when you sign in, and all of them are needed for signing in to work, so there is no cookie banner.
Where it is kept
Accounts are kept in a Cloudflare D1 database in Western Europe. Cloudflare runs the accounts server for us and does not use the data for anything else.
Backups of the database are kept by Cloudflare for up to 30 days, then removed for good.
Your control
Download everything we keep about you as one file from your account page.
Delete your account there at any time. Every row is removed at once and every device is signed out. Copies in backups disappear within 30 days.
Sign out removes the sign-in from this device. Remove a passkey or add another way to sign in from the same page.
Your rights
Under the GDPR and Türkiye’s KVKK (Law No. 6698) you can ask what we keep, get a copy, have it corrected or deleted, and object. Download and delete on the account page do this straight away.
We keep this data because you asked for an account (to provide the service you signed up for). We keep it only until you delete the account.