Demboria Digital · Legal

Privacy Policy

How this newsroom collects, uses, and protects personal data when you read the site or write to the desk.

Effective
12 October 2026
Applies to
demboria.digital

This policy covers demboria.digital

This policy describes how Demboria Digital collects, uses, and protects personal data when you visit the site or send a message to the newsroom. It applies to demboria.digital and to messages submitted through the site.

We publish reporting and analysis on Congress, the White House, midterm races, election administration, and policy fights. Reading that coverage does not require an account, and nothing in this policy asks you to create one to follow the desk's work.

Where the coverage links out to third-party sites, their own privacy practices apply once you leave demboria.digital. Where a term below is narrower than the general rule, the narrower reading governs.

What we collect, and what we do with it

A reading list for readers who want the short version before the full sections below.

  • Messages you send through the contact form

    Name, email address, and message — used to answer you and route tips or corrections.

  • Technical information collected automatically

    Browser type, approximate location derived from your IP address, and the pages you visit.

  • Newsroom contact details

    Questions and data requests go to [email protected], weekdays 9:00 AM – 6:00 PM ET.

  • What never happens to your data

    We do not sell personal data, and contact-form messages are not shared with advertisers.

The sections that follow set out the detail: what we collect, why we hold it, how long we keep it, and what you can ask us to do about it.

Information we collect

Two streams reach us: what you type into the site, and the small technical trace any visit leaves behind.

Hands typing a short message on a bright press-office desk in morning light

We collect information you provide directly, such as your name, email address, and message when you use the contact form. We also collect limited technical information automatically, including browser type, approximate location derived from your IP address, and the pages you visit.

We do not require an account to read our coverage.

Given by you

Name, email address, message body, and anything else you choose to include when writing to the desk.

Gathered on visit

Browser type, approximate location from your IP address, and which pages you read.

How we use information

We use your information to respond to messages, route tips and corrections, operate and secure the site, and understand which stories readers find useful. We do not sell personal data.

Aggregated, non-identifying information may be used to improve the site. If a reader's question points at a gap in our coverage, we may use the substance of that question to plan a follow-up report — without publishing the sender's details.

In practice

  • A correction or tip is read by the desk and answered at the address you send from.

  • Reading patterns are reviewed in aggregate to see which coverage is being used.

  • Site security relies on log data, which is kept only as long as it is needed.

Cookies and similar technologies

The site uses cookies and similar technologies for basic functionality and to measure traffic. Details are described in the Cookie Policy.

You can control cookies through your browser settings. Blocking them may change how parts of the site behave, but reading the coverage is not dependent on accepting them.

The Cookie Policy sets out the categories we use, what each one does, and how long each stays on your device. Where you have already chosen a preference on the banner the site shows you, that choice is stored so it does not reappear on every visit.

Sharing

We share personal data with service providers that help us operate the site, such as hosting and analytics providers, under contracts that limit their use of the data. We may disclose information when required by law or to protect the rights and safety of the site and its users.

What leaves the newsroom

  • Hosting and analytics providers process data on written instructions, and only to run the site.

  • Disclosure follows a lawful request, or is needed to protect the site and its readers.

What stays in the desk

  • Contact-form messages are not shared with advertisers, sponsors, or commercial partners.

  • We do not sell personal data, and we do not build advertising profiles from reader messages.

Retention

We keep what we need to finish the job, then let it go.

We keep contact-form messages for as long as needed to handle the request and for a reasonable period afterward for record-keeping. Technical logs are retained for a limited period.

When data is no longer needed, we delete or anonymize it. In practice that means a message is answered, kept for a short while in case the thread continues, then removed; log data is rotated on a short cycle and used only for security and traffic measurement.

What we hold Why Then
Contact-form messages Answering you, routing tips and corrections Kept briefly for records, then deleted or anonymized
Technical logs Site security and traffic measurement Rotated on a short cycle, no longer used for anything else
Aggregated statistics Seeing which coverage is used Held without identifying details

You can ask us about your data

Depending on your location, you may have the right to access, correct, or delete personal data we hold about you, or to object to certain processing. To make a request, contact the newsroom using the details on the contact page.

We will respond within the time required by applicable law.

Access

Ask what personal data we hold about you and receive a copy of it.

Correction

Ask us to fix details that are wrong or out of date.

Deletion

Ask us to erase messages and details that do not need to be kept for records.

Objection

Tell us to stop a particular use of your information and we will review it.

Requests can be made by email at [email protected] or through the Contact page. Please tell us enough for us to find the right record, and we will confirm what we can do and how long it will take.

Security

We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure, so we cannot promise that data will never be accessed without authorization.

If we become aware of a breach affecting your data, we will notify you as required by law. That may mean an email to the address you wrote from, or a notice on the site where a wider group of readers is affected.

If you believe you have found a security problem on demboria.digital, write to [email protected] with the steps you took to reproduce it. Please do not test against live reader data.

A low-key corridor service door lit by a single overhead light with a technician walking away

Access to newsroom systems is limited to the people who run and maintain the site, and reviewed as roles change.

Children

The site is intended for a general audience and is not directed to children. We do not knowingly collect personal data from children.

If you believe a child has provided personal data, contact us and we will delete it. Write to [email protected] with enough detail for us to find the record, and we will act on it.

Changes to this policy

We may update this policy to reflect changes in our practices or the law. The effective date at the top of the page will change when we do.

Continued use of the site after an update means you accept the revised policy. If a change is material, we will say so plainly rather than leave it to the date alone.

Questions about this policy

Questions about this policy can go to the newsroom through the contact page.

The desk

One place for questions about privacy, data requests, tips, and corrections. Messages are read by the newsroom during working hours and answered at the address you write from.