Privacy Policy & Data Governance

1. Introduction & Core Commitment

At TruthUpfront ("Company", "We", "Us", or "Our"), we believe that journalism grounded in evidence must begin with unequivocal respect for reader trust and data privacy. We adhere to the foundational principle of data minimization: we collect only what is strictly necessary to deliver rigorous reporting, protect system integrity, and engage with our community. We do not sell, rent, monetize, or broker personal reader information to third-party data brokers under any circumstances.

2. Data We Collect Across the Network

A. Information You Voluntarily Provide

• Editorial & Whistleblower Inquiries: Correspondence sent to our newsdesks (
  mail@truthupfront.com
  ), tip lines, or bureau forms. Confidential source materials are sanitized of identifying metadata to preserve journalistic privilege.
• Community Contributions & Comments: Your submitted name, handle, email address, and commentary submitted under our
  Community Guidelines
  .
• Editorial Newsletters: Your email address when subscribing to investigative digests from TruthUpfront or specialized beats across Tech, Health, and Business.

B. Automated Technical Telemetry

When you access our flagship website or any subdomain (tech.truthupfront.com, health.truthupfront.com, business.truthupfront.com), our secure infrastructure automatically logs standard technical telemetry, including: IP address (anonymized for analytics), browser type, operating system, referring URL, time spent per article, and diagnostic performance metrics.

3. Legal Bases for Processing (GDPR & UK GDPR)

For visitors from the European Economic Area (EEA) and the United Kingdom, we process personal data under the following lawful bases pursuant to Article 6 of the General Data Protection Regulation (GDPR):

• Legitimate Interests: Operating an independent newsroom, preventing DDoS attacks, verifying factual corrections, and ensuring network infrastructure security across all subdomains.
• Consent: Sending email newsletters and activating non-essential performance cookies, which you may withdraw at any time.
• Legal Compliance: Retaining records required by applicable statutory regulations or law enforcement subpoenas meeting constitutional standards.

4. California Consumer Privacy Act (CCPA / CPRA) Rights

California residents hold distinct rights regarding their personal information under the California Consumer Privacy Act and the California Privacy Rights Act:

• Right to Know & Access: You may request disclosure of categories and specific pieces of personal data collected over the preceding 12 months.
• Right to Deletion: You may request erasure of personal data, subject to journalistic exemptions under the California Constitution and First Amendment.
• Right to Non-Discrimination: We do not alter service tiers, paywall access, or editorial quality based on your exercise of privacy rights.
• Zero Sale of Personal Data: TruthUpfront does not "sell" or "share" personal data for cross-context behavioral advertising as defined by the CPRA.

5. Cookies & Tracking Technologies

We use essential cookies to maintain session state, secure forms against cross-site scripting (CSRF), and respect user cookie consent choices. We also utilize aggregated, privacy-conscious analytics to measure which investigations resonate with our global readership. For full details on cookie categories and browser controls, please consult our dedicated Cookie Policy.

6. Artificial Intelligence & LLM Training Data Restrictions

TruthUpfront rigorously investigates algorithmic models across TruthUpfront Tech. All journalistic investigations, original reporting, and analytical pieces published across TruthUpfront and its subdomains represent proprietary intellectual property. Automated scraping, data harvesting, or model training by commercial Artificial Intelligence (AI) and Large Language Model (LLM) providers is governed by our AI & Content Integrity Policy and Terms of Service.

7. Cross-Subdomain Data Sharing & Cloud Security

Because TruthUpfront, TruthUpfront Tech, TruthUpfront Health, and TruthUpfront Business operate under unified newsroom administration, non-identifying telemetry and technical security logs are shared between subdomains solely to maintain system stability, firewall defenses against malicious actors, and uniform user experience. All data transmissions are encrypted using Transport Layer Security (TLS 1.3) and stored in hardened facilities using AES-256 encryption at rest.

8. Children's Online Privacy Protection (COPPA)

Our journalism covers macroeconomics, technology policy, clinical medicine, and global news. We do not intentionally target, collect, or solicit information from children under the age of 13. If you believe a minor has submitted personal information to our site, please contact us immediately for prompt deletion.

9. Data Retention & Journalistic Shield Protections

We retain standard server logs for no longer than 90 days. Editorial communications, published corrections, and journalistic source archives are maintained in accordance with standard newsroom archiving practices and applicable United States shield laws.