Legal
Privacy Policy
What we collect, why, how long we keep it, and your rights to ask us to stop.
Updated
This policy explains how TheChainPost (“we,” “us,” or “the publication”) handles personal data. For any privacy-related request, write to privacy@thechainpost.com and expect a response within 30 days.
1. What we collect
- Analytics. Page URL, referrer, coarse device type, country code, and a rotating session hash. No names, no precise IP addresses, no cross-site tracking.
- Newsletter. Your email address, a hashed version of it, the consent record, and the double opt-in token until confirmed.
- Contact form. Your name, email address, message, and the timestamp of submission.
- Advertising. Third-party providers such as Google AdSense may set their own cookies. See the cookies page for the full inventory.
2. Why we collect it
- To operate the site and measure which coverage lands.
- To deliver the newsletter if you opt in.
- To reply when you write to the desk.
- To comply with legal obligations when they apply.
Legal bases under the GDPR are legitimate interest for analytics and site operation, consent for the newsletter and advertising cookies, contract for replying to your message, and legal obligation for tax, DMCA, and law-enforcement requests.
3. Who we share it with
- Our hosting provider and edge network.
- Our managed Postgres database provider.
- Our managed cache provider.
- Our transactional and marketing email provider.
- Google AdSense for display advertising, subject to consent.
- Our error-monitoring provider. No personal data in stack traces.
The publication never sells personal data to anyone.
4. How long we keep it
- Analytics events for 24 months, then aggregated.
- Newsletter data until you unsubscribe, plus 30 days for legal audit.
- Contact messages for 36 months.
- Affiliate click logs for 24 months.
5. Your rights
Under the GDPR in the EU and the UK, and under the CCPA and CPRA in California, readers can request access, deletion, correction, portability, and restriction of processing. Email privacy@thechainpost.com with a valid request. The desk responds within 30 days.
6. Cookies and similar technology
A full cookie inventory lives on the cookies page. EU and UK visitors see a consent banner before advertising cookies run.
7. Children
The site is not directed at children under 16. The publication does not knowingly collect data from them. If a reader believes a minor has submitted personal data, email the desk and the record will be deleted.
8. International transfers
Processors run in the EU and the United States. Cross-border transfers rely on Standard Contractual Clauses or the EU-US Data Privacy Framework where applicable.
9. Changes to this policy
This page is updated and the “Last updated” date bumped whenever something material changes. Newsletter subscribers receive a notification email for any significant policy update.