Privacy Policy

1. Who we are

AlaTori ("we", "us", "our") is a news aggregator for Suriname. For privacy inquiries, contact us at [email protected].

2. What data we collect

We collect the following personal data:

• Account data: Email address and name provided during registration or received from your social login provider (Google, Facebook, or Apple).
• Social login identifiers: A provider-specific user ID from Google, Facebook, or Apple when you use social login. If you use Sign in with Apple with a private relay email, we only receive the relay address.
• Bookmarks: Articles you choose to bookmark.
• Usage data: Anonymous click counts on articles, associated with a pseudonymous device identifier stored in your browser. This is not linked to your account.
• Authentication tokens: JWT tokens stored in your browser's local storage to keep you logged in.
• Server logs: IP address, browser user agent, and request timestamps retained for up to 30 days for security and debugging purposes.

We do not collect location data, payment information, or send push notifications.

3. How we use your data

• Account data and social login identifiers: To create and authenticate your account, and to link social login providers to your account with your explicit consent.
• Bookmarks: To save and display your bookmarked articles across sessions.
• Usage data: To rank popular articles in the "Top Stories" section. This data is anonymous and not linked to your identity.
• Server logs: To detect abuse, debug errors, and maintain service security.

4. Legal basis for processing

• Contract performance: Account data, bookmarks, and authentication tokens are necessary to provide the service you signed up for.
• Legitimate interest: Anonymous usage data and server logs help us improve the service and maintain security.

5. Who we share data with

We do not sell your personal data. We do not share your data with third parties for advertising or marketing purposes.

We use third-party service providers for hosting, content delivery, and social login authentication. These providers process data only as necessary to operate AlaTori and are bound by data processing agreements. A list of our current sub-processors is available on request by emailing [email protected].

6. International data transfers

Your data may be processed outside of Suriname by our service providers. Where data is transferred internationally, we ensure appropriate safeguards are in place through our providers' data processing agreements.

7. How long we keep your data

• Account data and bookmarks: Retained until you delete your account.
• Anonymous usage data: Retained indefinitely (not linked to your identity).
• Server logs: Retained for up to 30 days.
• Social login tokens: Revoked and deleted when you unlink a provider or delete your account.

8. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and all associated data.
• Export your data in a portable format.
• Restrict or object to processing of your data.
• Lodge a complaint with a data protection authority.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

9. Account deletion

You can delete your account at any time from the Settings page in the app. Deleting your account permanently removes all your personal data, including your email, bookmarks, and linked social accounts. If you signed up via Facebook, Google, or Apple, we also revoke the associated authentication tokens. Deletion is permanent and cannot be undone.

10. Data from social login providers

When you log in with a social provider, we receive only the data necessary for authentication: your email address, name, and a provider-specific identifier. We use this data solely to create or authenticate your AlaTori account. We do not access any other data from your social accounts (such as friends lists, timelines, or other services). If your provider offers a private relay email option, we respect that choice and use the relay address provided.

You can unlink any social provider from your account at any time via the Settings page. Unlinking removes the provider's data from our systems.

11. Cookies and local storage

AlaTori does not use tracking cookies or third-party analytics. We use your browser's local storage to store authentication tokens (to keep you logged in) and a pseudonymous device identifier (for anonymous article click counting). You can clear this data at any time by clearing your browser's site data.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on the website. Your continued use of AlaTori after changes are posted constitutes acceptance of the updated policy.