Data protection
Privacy notice
This notice explains what personal data may be processed when someone visits Bulleted, contacts the publication or accesses the protected newsroom.
Controller and contact
For personal data processed directly through this website, Bulleted acts as the data controller. Privacy questions and rights requests can be submitted through the contact page.
Data we may process
- Technical request and security data, such as IP address, browser information, timestamps and anti-abuse signals handled by hosting and security providers.
- Contact details and message content submitted voluntarily through the contact form.
- Authentication and activity records for authorised newsroom administrators.
- Consent or privacy choices recorded through Google's certified consent-management platform.
Purposes and legal bases
Technical and security data is processed to operate, protect and troubleshoot the service, based on legitimate interests in maintaining a secure publication. Contact information is processed to respond to enquiries, correction requests and legal or privacy communications.
Google's certified consent service is active for eligible visitors. Advertising placements remain paused while the site is under review, and Bulleted does not currently activate audience analytics. Optional advertising will rely on consent where required.
Service providers and transfers
Infrastructure, security, authentication and email delivery may involve service providers including OpenAI, Cloudflare and Resend. Google provides the certified consent service and may later provide advertising after approval and the user's applicable choices. Providers may process information outside the European Economic Area under their applicable contractual and legal safeguards.
Retention
Contact messages may be retained for up to 12 months unless a longer period is needed for a correction, dispute, legal obligation or defence of claims. Security logs follow provider retention settings. Editorial audit records are retained as needed to preserve publication accountability.
Your rights
Depending on applicable law, individuals may request access, correction, deletion, restriction, portability or objection, and may withdraw consent at any time without affecting earlier lawful processing. Requests may require reasonable identity verification.
Individuals may also lodge a complaint with the competent data-protection authority.
Current pilot configuration
The public site does not currently offer reader accounts or newsletters. The Google AdSense tag is active to deliver the certified consent message and support publisher review, but ad placements and audience analytics remain paused.