Privacy

Privacy notice

What personal information FactSnap handles, why it is used, how long it is kept, and how users can exercise their rights.

Controller and scope

FactSnap is operated under the display name fizzycrisp; there is currently no separate incorporated or registered business entity. Privacy requests: factsnap556@gmail.com. This notice covers accounts, community features, inquiries, security and usage metrics. Reading news does not require an account.

Information and purposes

  • Google account identifier (sub), email and verification status, display name, profile-image URL, role and consent records for account creation and sign-in.
  • Hashed session and CSRF tokens, expiry and access times, and hashed IP/User-Agent values for session security and abuse prevention.
  • Reactions, saved stories, category preferences, comments, comment reactions, reports, appeals, risk and moderation records for requested member and community features.
  • Inquiry type, optional email and article URL, message, status and timestamps for responding to requests.
  • IP and request metadata at the infrastructure layer, referrer origin, impressions, clicks, dwell, shares and referral events for security, aggregate statistics and non-personalized ranking.

Collection and choice

Data is received from the Google ID token, user-submitted features, necessary cookies, and ordinary HTTPS requests. FactSnap does not store Google passwords or Google access tokens. Declining required account data prevents member features but does not prevent public news reading.

Retention

  • Account and consent records: until account deletion, after which direct account identifiers are removed and the account row is anonymized.
  • Active sessions: up to 30 days; expired or revoked session records may remain for up to another 30 days.
  • Reactions, saved stories, preferences and comment reactions: until deletion or account deletion.
  • Comments, reports, appeals, moderation and audit records: for the service lifetime or until the operational, rights-protection or dispute purpose ends; comments may remain under an anonymized former-user label.
  • Resolved or rejected inquiries: up to 365 days after resolution; open inquiries and active disputes until completed.
  • Rate-limit hashes: up to 2 days; metric-deduplication hashes: up to 8 days; Cloudflare Workers logs: up to 7 days.

Public content and children

A comment publishes the display name, comment and time to other users. Do not submit passwords, government identifiers, payment details, sensitive information or another person’s private data. FactSnap does not offer member services to children under 14 and has no parental-consent flow.

Sharing and processors

FactSnap does not sell personal information and does not ordinarily disclose it to separate third parties, except with consent or where lawfully required. Cloudflare, Inc. processes hosting, storage, delivery, security, logs and Turnstile data on FactSnap’s behalf. Google LLC provides account selection and may process direct email under its own privacy policy.

International processing

Cloudflare and its published subprocessors may process encrypted service data in the United States, EEA, United Kingdom, Japan, Australia, Canada, Singapore, India, South Korea and other listed operating locations. Google may process sign-in and email information on servers worldwide. Refusing Cloudflare processing prevents use of the Cloudflare-hosted site; refusing Google sign-in prevents member features but not public reading. FactSnap does not currently guarantee storage in a Korean-only jurisdiction.

Cookies and automated processing

Necessary HttpOnly, Secure, SameSite=Lax cookies maintain sessions and CSRF protection; theme settings may remain in browser local storage. FactSnap currently uses no third-party personalized-ad tracker and advertising is disabled. Aggregate metrics rank popular stories, and automated risk or report thresholds may hold or temporarily hide comments. Users may request an explanation and human review through appeal or contact channels.

Before introducing Google ads, we will disclose advertising-cookie purposes, Google and participating advertising providers, and ways to opt out of personalized advertising. Where advertising consent is required, we will collect it separately from account registration. Declining advertising consent will not prevent public news reading.

Rights and security

Users may request access, correction, deletion, suspension, withdrawal, explanation or review by deleting their account or contacting factsnap556@gmail.com. Identity verification may be required. Safeguards include encrypted transport, server-side Google token verification, secure cookies, CSRF protection, secret separation, one-way hashing, Turnstile, rate limits, role-based access, audit records and scheduled deletion.

Contact, remedies and changes

Privacy contact: fizzycrisp · factsnap556@gmail.com. Korean users may also contact the Privacy Infringement Report Center (118) or the Personal Information Dispute Mediation Committee (1833-6972). This notice takes effect on August 28, 2026. Material changes will be posted before they apply and renewed consent will be requested where required by law.