Privacy notice

Summary

• No tracking cookies are set by Basis Desk. Reading the site does not require an account.
• We use Google Tag Manager for site analytics; where consent is legally required, non-essential tags do not fire until you agree.
• If you subscribe to email, we store your address and confirmation status until you unsubscribe.
• Server logs and security controls are provided by Cloudflare and are retained briefly.

Who is responsible

The controller is the operator of Basis Desk, Gibraltar. Contact: hello@basisdesk.news.

What we process and why

Site delivery and security

Our host, Cloudflare, processes IP addresses, request metadata and browser characteristics to deliver pages, cache content and block abuse (legitimate interest). Cloudflare's own logs are retained for a short period per their policies.

Analytics

We use Google Tag Manager to load analytics. Analytics may collect pseudonymous usage data (pages viewed, device type, approximate location). In the EU/EEA, UK and other jurisdictions that require it, these tags run only with your consent. You can opt out via your browser settings or by declining consent.

We also count visits ourselves, without cookies: when a page loads, your browser tells us the page path and the referring site. We store only daily totals by site section, traffic source category (for example "search" or "social") and country, plus a salted one-way hash of your IP address and browser that changes every day, so we can count daily unique visitors. The hash cannot be turned back into your IP address, is never linked across days, and is deleted after 35 days (legitimate interest: measuring readership).

Email subscriptions

When you subscribe we store your email address, the list(s) chosen, a confirmation token and timestamps (contract/consent). Emails are sent through a transactional email provider acting as our processor. Unsubscribe links are in every message; unsubscribed addresses are kept only to honour the opt-out.

Push notifications

If you enable them, we store the anonymous push endpoint your browser gives us and your chosen topics. Disable at any time in your browser; expired endpoints are deleted automatically.

Tools

Addresses you enter in the Token Safety Checker are sent to GoPlus Security to retrieve risk data and cached briefly to speed up repeat lookups. We do not associate them with you. Rate limits use a hashed, short-lived view of your IP address.

Local storage

Your theme choice and dismissed banners are stored in your browser's local storage — strictly to remember your preferences.

Social platforms and YouTube API Services

Basis Desk publishes its own content to its own accounts on YouTube, Facebook, Instagram, Threads, Bluesky, Mastodon, Nostr and Telegram using the platforms' official APIs. These integrations act only on Basis Desk's accounts: we do not use them to access, collect or store data about other users, and readers never sign in to Basis Desk with these services.

Our video publishing uses the YouTube API Services to upload videos to the Basis Desk channel and to read that channel's own video list. By watching or interacting with our videos on YouTube you are subject to the YouTube Terms of Service, and Google's processing is described in the Google Privacy Policy. The only data our system stores from these APIs are the access tokens for our own accounts (kept encrypted in our infrastructure) and the identifiers of the posts and videos we publish. Access for any Google account can be revoked at any time at Google security settings; access for Meta accounts in Facebook/Instagram settings under Apps and Websites.

Data deletion

To have any data about you deleted — including anything received through Facebook, Instagram, Threads or YouTube — email privacy@basisdesk.news with the subject "Data deletion request". We confirm within 30 days. Email subscribers can also delete their data instantly with the unsubscribe link in any message.

Sharing

We do not sell personal data. Processors: Cloudflare (hosting, storage, AI inference, email delivery), Google (Tag Manager/analytics; YouTube API Services for our own channel), Meta (publishing to our own Facebook, Instagram and Threads accounts), our email provider, GoPlus Security (token checks). Data may be processed outside your country under appropriate safeguards.

Your rights

Depending on where you live (including under the GDPR, UK GDPR and Gibraltar's data protection law), you may have rights to access, rectify, erase, restrict or object to processing, and to data portability. Email hello@basisdesk.news. You may also complain to your local data protection authority.

Retention

Subscriber data: until you unsubscribe (plus the opt-out record). Push endpoints: until they expire or you disable them. Tool lookups: up to one hour in cache. Analytics: per the analytics provider's default retention.

Children

The site is not directed at children under 16, and we do not knowingly collect their data.

Changes

We will update this notice when our processing changes; the date above reflects the current version.