Privacy notice

Last updated: 2026. Compliant with the Kenya Data Protection Act 2019 and the Office of the Data Protection Commissioner's guidance.

What we collect

• Account data: handle, email, password hash, optional bio.
• Activity data: posts, comments, saved posts, tracked stories — everything you do on the site.
• Tip data: what you submit via /tips, including any uploaded files. We do not log your IP for tip submissions.
• Server logs: IP, user-agent, timestamps for every request, retained 30 days for abuse and rate-limit purposes.
• Optional interaction research: only when you allow it in this browser, we collect sampled pointer movement, clicks, scroll depth, route path, viewport size, and timing offsets to improve usability. Capture is limited to up to five active minutes per page, stops after two idle minutes, and is capped per page. Admins may export this opt-in dataset into private Cloudflare R2/S3 object storage for usability review. We do not collect keystrokes, form values, account ids, IP addresses, user agents, private tip pages, editor/admin pages, or staff account browsing for this research.

Why we collect it

To run the site (account, sessions, password reset), to moderate abuse, to satisfy our legal obligations, and to improve the editorial product and reader experience. We do not sell or rent your data. We do not run third-party advertising trackers.

Your rights

Under the Kenya Data Protection Act 2019 you have the right to access the data we hold on you, correct it, delete your account, and lodge a complaint with the Office of the Data Protection Commissioner. Email [email protected] to exercise any of these rights.

Cookies

We set one cookie — a session cookie that signs you in. We do not set tracking cookies or advertising cookies. Optional interaction research uses local browser storage for your choice and a pseudonymous research session id, and raw events are automatically pruned after 30 days by default. The session cookie expires when you sign out.