Privacy

We only collect what we genuinely need to run the site and process donations. Specifically:

• When you analyse an article: the article URL and a hash of it. The resulting analysis is stored against that URL so other visitors can read it without re-running the analysis. We do not store who requested it.
• When you donate: the amount, payment-provider ID, timestamps, and (optionally, only if you provide them) a display name, message, and email address. We also keep your IP address and browser user-agent for fraud prevention.
• Marketing consent(only if you tick the box on the donation form). We don't currently send marketing email — when we start, you'll only hear from us if you ticked it.

We don't set any tracking cookies. We don't use Google Analytics, Meta Pixel, or any other third-party tracker. Our payment processors and email provider may set cookies on their own checkout or unsubscribe pages — that's outside our control and covered by their own privacy policies.

• Donations — performance of contract (we need this information to take and record your payment) and our legitimate interest in fraud prevention (IP and user-agent).
• Tax records — legal obligation. UK rules require us to keep financial records for six years.
• Marketing email — your explicit consent. You can withdraw it at any time.

• Donor wall data (display name, message) — until you ask us to remove it, or until the donation row is deleted.
• Email and IP address — until you anonymise via our self-service portal, or 6 years from donation date, whichever comes first.
• Financial records (amount, payment provider ID, timestamps) — 6 years, even after anonymisation. Required by HMRC.
• Analysis results — kept indefinitely so links shared on social media keep working.

We rely on a small number of well-known service providers to run the site. Each only sees the data necessary for its specific role, and none of them train models on data we send them.

• Payment processors — handle card and crypto transactions. They see the amount and your email if you provided one. Card details go directly to them; we never see those.
• Email service provider — sends transactional emails (donation receipts and data-portal magic links). They see the recipient address and email content.
• Content-moderation service — vets display names and donation messages for abusive content before they appear on the public supporter wall.
• Analysis-engine provider — receives the article text when you submit a URL, and returns the analysis you read on the page.
• Hosting and database providers — run the servers and store the data described above.

You have the right to know exactly which companies sit behind each category. Email supporters@bias.guru and we'll tell you, along with a link to each provider's privacy policy.

Under UK GDPR you have the right to access, correct, erase, or restrict processing of the data we hold about you. The fastest way to exercise these rights is through our self-service portal — request a magic link with your email and you can view, export, or anonymise your data without involving us.

If you didn't provide an email when donating, you're already effectively anonymous to us — contact us with your donation reference ID if you need help.

You also have the right to complain to the Information Commissioner's Office if you think we've mishandled your data.

We can be reached at supporters@bias.guru.