Privacy Policy
Effective 23 September 2026
This policy explains what personal data nuze collects, why, and what you can do about it. It is written for the UK GDPR and the EU GDPR. The data controller is [legal entity name, registered address], reachable at info [at] nuze [dot] com.
1. What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Account details: name, username, email address, password (stored as a hash — we can't read it) | To create and secure your account and contact you about it | Contract |
| Profile details you choose to add: photo, bio, location, beats, links, self-declared perspective | Shown publicly on your profile and next to your stories and comments | Consent (you choose what to add and can remove it) |
| Content you publish: stories, images, comments, replies, and the edit history of your stories | Publishing is the service. Stories, comments and edit history are public. | Contract |
| Your activity on nuze: subscriptions, topic follows, likes, ratings, saved stories, reading history (which stories you opened and how far you scrolled), blocks, reports | To build your feed, show counts, offer “continue reading”, send you in-app notifications (new subscriber, comments, likes, new stories from people you follow), and run moderation. Saved stories, reading history, notifications, blocks and reports are private to you (and, for reports, staff). You can clear your reading history at any time. | Contract; legitimate interests (keeping the platform safe) |
| Direct messages you send and receive on nuze, and who you can be messaged by (your setting) | Delivering private conversations between two people. Messages are visible only to the two participants — there is no staff view of message content — and are kept until either participant deletes their account, which removes the whole conversation for both. Either person can delete a message they sent (it is removed for both). We see a message only if its recipient reports it — the report carries that one message's text and nothing else from the conversation — and we may then remove it or act on the sender. | Contract |
| Messages you send through the contact form: your name, email address, the topic and the message, and the IP address it was sent from | To answer you. Delivered to our own mailbox; kept as long as the conversation is live and then deleted with ordinary mailbox housekeeping. | Legitimate interests (responding to enquiries) |
| Moderation records: reports made about you or by you, suspension status, staff notes | To enforce the Terms and Community Guidelines and to handle appeals | Legitimate interests; legal obligation |
| Technical logs: IP address, browser type, requested pages, timestamps (server and reverse-proxy logs) | Security, abuse prevention, debugging | Legitimate interests |
| Story view counts (per story, per day — numbers only). To avoid counting refreshes, a hash of your IP address and browser type is kept in memory for 30 minutes and then discarded; it is never stored. | Showing journalists how their stories are read | Legitimate interests |
| The IP address and browser (user agent) you signed up from; the IP address and browser each story was created from and last saved from, and for each public edit; and short-lived in-memory counts of recent actions per account and per IP | Rate limiting, spotting networks of fake accounts, and being able to answer a lawful request about who published something. The counts are never stored; the rest is kept with your account and stories and is visible only to staff. | Legitimate interests; legal obligation |
We do not run advertising, we do not sell personal data, and we currently use no third-party analytics or tracking.
2. What's public
Your name, username, profile details, stories, comments, replies, the edit history of your stories, and your subscriber and story counts are visible to anyone on the internet, including search engines. Your email address, password, direct messages, blocks, reports and moderation records are never public.
3. Where your data lives
nuze runs on servers hosted by Hetzner Online GmbH in [Germany] (EU). Transfers between the UK and the EU are covered by the UK's adequacy regulations for the EU. We don't transfer your data outside the UK/EU, except that content you publish is, by design, available worldwide.
4. Who we share it with
- Service providers who host nuze (Hetzner). Email — account confirmation, password resets, reply and message alerts and the optional daily digest — is sent from our own mail server on the same host, not a third-party service. Every notification email has a one-click unsubscribe link, and you can change email settings in Edit profile.
- Other users, to the extent your content and profile are public (section 2).
- Authorities, when the law requires it or to protect someone's safety.
- A successor, if nuze is sold or merged — we'd tell you first.
5. How long we keep it
- Your account and content: until you delete them (or your account).
- Direct messages: until either participant deletes their account, which removes the conversation for both.
- Deleted accounts: removed from the live database immediately. Copies in backups are overwritten within [30 days].
- Moderation records about a suspended or closed account: kept for up to [12 months] to prevent repeat abuse.
- Technical logs: [30 days].
6. Your rights
Under the GDPR you can ask us to:
- Access the personal data we hold about you and get a copy;
- Correct it — most of it you can edit yourself in Edit profile;
- Delete it — you can delete your whole account yourself in Edit profile, and individual stories and comments from their pages;
- Restrict or object to processing based on legitimate interests;
- Port your data to another service in a machine-readable form.
Email info [at] nuze [dot] com for anything you can't do yourself. We respond within one month. If you're unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
7. Cookies
nuze uses only strictly necessary cookies (to keep you signed in and protect forms). Details on our Cookies page.
8. Children
nuze is not for anyone under 16. If you believe a child has created an account, email us and we'll remove it.
9. Changes
We'll post any changes here and update the effective date. For significant changes we'll also notify you on the site or by email.