Privacy Policy
We collect what we need to deliver the membership you paid for, and nothing more. We do not sell reader data, we do not run third-party ad trackers, and we do not share your reading habits with anyone.
Quiet by Design
We built NewBostonPost to be the kind of newsroom that doesn’t need to watch you to pay its reporters. The membership you bought funds the journalism. There is no second business model here, no data brokers, no behavioral ads, no trackers following you to the next site.
This document explains exactly what we collect, why we collect it, who can see it, and how to take it back. It is written in plain English. If anything below is unclear, write to privacy@newbostonpost.com and we’ll fix the wording.
What We Collect and What We Don’t
We collect three categories of information, account, usage, and communications, and we share data with exactly three vendors, each under written agreements limiting use to the service they perform. We do not buy reader data from brokers, we do not set third-party cookies, and we do not run pixel trackers. The card to the right is the whole list.
The Eight Sections
-
01
Information We Collect
Three categories: (a) account data you provide at sign-up, name, email, billing details processed by Stripe; (b) usage data, articles read, sections visited, time on page, device and browser collected through first-party analytics; (c) communications you send us, emails to the newsroom, letters, comments on member discussion threads. We do not buy reader data from third-party brokers.
-
02
How We Use It
Account data lets us deliver the membership you paid for: authenticating logins, processing renewals, sending the newsletter you subscribed to, and contacting you about service changes. Usage data informs editorial planning, which sections need investment, which formats readers finish, never advertising profiles. We do not sell, rent, or share reader-level data with advertisers, brokers, or affiliates.
-
03
Cookies & Similar Technologies
We set a small number of first-party cookies: a session cookie that keeps you logged in, a preference cookie that remembers light/dark mode and font size, and a CSRF token cookie required for forms. We use Plausible Analytics, a cookieless, privacy-respecting service that does not set cookies and does not track readers across sites. There are no third-party advertising or social-media tracking pixels.
-
04
Information We Share
We share data with three vendors, each under written agreements limiting use to the service they provide for us: Stripe (payment processing), Postmark (transactional email and newsletter delivery), and Cloudflare (hosting and DDoS protection). We will disclose information when required by valid legal process, and we will tell you when we receive such a request unless legally prohibited from doing so.
-
05
Data Retention
Account records are retained for as long as you remain a member, plus seven years for tax and audit purposes. Newsletter subscriptions are kept until you unsubscribe. Site analytics data is aggregated after 30 days and individual session records are deleted. Comments on member discussion threads remain visible alongside published articles unless you ask us to remove them.
-
06
Your Rights & Choices
You may request a copy of your personal data, ask us to correct inaccurate information, or request deletion of your account at any time. Email privacy@newbostonpost.com from the address on file and we will confirm and complete the request within 30 days. Members in California, Connecticut, Colorado, Virginia, and other states with comprehensive privacy laws have additional rights, we honor them for all readers regardless of residency.
-
07
Children
NewBostonPost is intended for adult readers and we do not knowingly collect information from anyone under 16. If you believe a child has registered for an account, contact privacy@newbostonpost.com and we will delete the account.
-
08
Changes to This Policy
We will notify members by email at least 30 days before any material change to this policy takes effect, and we will preserve previous versions in our policy archive. Non-material changes, typo fixes, vendor name updates, contact information, may be made without notice.
What This Looks Like in Practice
You don’t have to trust this document, you can verify it. Open developer tools and check the cookies. Watch the network tab while loading an article. Email us for an export of your account record. The three checks below take about ninety seconds.
Open dev tools → Application → Cookies. You will find one session cookie, one preference cookie, one CSRF token. That’s it.
View the Network tab while loading any article. You will not see calls to Google Ad Manager, Facebook Pixel, Taboola, or any data broker.
Email privacy@newbostonpost.com and we’ll send your full account record, every field, every preference, every newsletter sent, within 30 days.
Questions, Requests, Concerns
For data export, correction, or deletion requests, or any privacy concern about how your information is handled, write to our privacy desk. We respond within five business days and complete formal requests within 30.
privacy@newbostonpost.comData export · Correction · Deletion · GDPR & CCPA inquiries
Cookies, Tracking & Your Data
Do you sell my data to anyone?
No. We do not sell, rent, or share reader-level data with advertisers, data brokers, or affiliates. Your membership is the entire business model.
What about Google Analytics or Facebook tracking?
Neither is used. We use Plausible Analytics, a cookieless, privacy-respecting service. There is no Facebook Pixel, no Google Tag Manager, no behavioral ad tracker on the site.
How do I delete my account?
Email privacy@newbostonpost.com from the address on file. We confirm receipt within five business days and complete the deletion within 30 days, retaining only what tax and audit law require.
Can I get a copy of everything you have on me?
Yes, this is a "data subject access request." Email privacy@newbostonpost.com and we’ll send your full account record (every field, every preference, every newsletter sent) within 30 days.
Are member comments private?
Member discussion threads are visible to other paying members only, never crawled by search engines, and never indexed by AI systems. They are stored under the same access controls as the rest of your account record.
What if you change this policy?
For any material change, we email all members at least 30 days before the change takes effect and preserve previous versions in our policy archive.
