Privacy Policy | The Daily Whoops

Last updated: March 11, 2026

1. Introduction

The Daily Whoops ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We may collect and process the following types of personal data:

Data Type	Purpose	Legal Basis	Retention
Email address	Account creation, authentication, notifications	Consent	Until account deletion
Username	Identification, display name	Consent	Until account deletion
Password (hashed)	Authentication	Legitimate interest	Until account deletion
Saved articles & topics	User preferences	Consent	Until account deletion
IP address	Security, fraud prevention	Legitimate interest	90 days
Session data	Authentication	Legitimate interest	30 days

3. How We Use Your Data

To provide our service: Authenticating you, saving your preferences, and showing saved articles.
To communicate with you: Sending important service notifications and optional updates.
To improve our service: Analyzing usage patterns (if you consent to analytics cookies).
To ensure security: Detecting and preventing fraud and abuse.

4. Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about the cookies we use, please see our Cookie Policy.

5. Your Rights (GDPR)

Under the UK GDPR, you have the following rights:

Right to access: Request a copy of your personal data.
Right to rectification: Correct inaccurate or incomplete data.
Right to erasure: Request deletion of your data ("right to be forgotten").
Right to restrict processing: Limit how we use your data.
Right to data portability: Receive your data in a portable format.
Right to object: Object to processing of your data.
Right to withdraw consent: Withdraw your consent at any time.

To exercise these rights, please contact us at privacy@thedailynewstoday.com.

6. Third-Party Services

We use the following third-party services:

Supabase: Database and authentication infrastructure.
NewsAPI.ai: News content aggregation (no personal data shared).
Ollama: Query expansion, summarization, article cleaning (no personal data shared).

Each third-party service provider uses your personal data only to the extent necessary to perform their services and is bound by data protection agreements.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

Encryption of data in transit (HTTPS) and at rest
Secure password hashing using bcrypt
Row-level security in database
HTTP-only, secure cookies
Regular security audits

8. Data Breaches

In the event of a personal data breach, we will notify the Information Commissioner's Office (ICO) within 72 hours, and affected users without undue delay.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: privacy@thedailynewstoday.com
Address: [Your Company Address]

This privacy policy was created to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.