Privacy Policy — draft for owner review

An explanation of the prepared data flows.

Newsletter signups are processed by Brevo with consent and confirmation. Newsroom authentication and editorial records use Supabase when connected. AI drafting sends the research material explicitly submitted by a staff member to OpenAI. Public reading does not require an account.

The prepared site loads no advertising or analytics trackers. Staff sessions use an encrypted HttpOnly cookie. The owner must confirm the legal controller, retention periods, contact process and applicable regional requirements before adopting this policy.