Privacy

Privacy policy

We collect as little as possible. There are no advertising trackers, no third-party analytics, no fingerprinting and no stored IP addresses.

Last updated: November 2026


What we collect

  • Reading analytics, only with consent. When you press “Allow analytics” we record: the page path, a random session identifier, a coarse device class (mobile, tablet, desktop), the referring site hostname, UTM campaign parameters, scroll milestones, clicks on a small set of labelled elements, and the time the tab was actively visible.
  • Newsletter details. If you subscribe, we store your email address, the time you consented, and whether you confirmed the double opt-in email.
  • Admin accounts. Staff accounts store a name, email, role and a scrypt password hash. Never the password itself.

What we do not collect

  • No raw IP addresses are written to our analytics database.
  • No third-party analytics, advertising or social pixels are loaded.
  • No cross-site tracking, keystroke logging or form-content recording.
  • No device fingerprinting.

Cookies and local storage

Public pages set no advertising cookies. We use browser storage for three things: your analytics choice, a random session identifier, and a random visitor identifier that expires after 90 days. Staff sessions use a single signed, HttpOnly cookie that expires after seven days.

How long we keep data

Raw analytics events are aggregated and automatically deleted after 400 days; daily summaries are retained in aggregate. Newsletter records are kept until you unsubscribe, plus a short suppression record so we do not email you again. Server logs are rotated.

Your rights

You can withdraw analytics consent at any time by clearing this site’s storage; the next page load will ask again and nothing further is measured until you accept. To unsubscribe, use the link in any newsletter. To request access to or deletion of your newsletter data, email privacy@alpnews.com.

Security

Access to the newsroom is role-based and password-protected, with rate limiting and signed sessions. The database is bound to localhost, authenticated, and backed up daily. We do not expose credentials in logs or client code.

Changes

Material changes to this policy are dated on this page. Questions: privacy@alpnews.com.

Questions about this page? Contact the newsroom.