Privacy Policy.

1. Who is responsible for your data

The data controller is High Intent Media Inc, 16192 Coastal Highway, Lewes, Delaware 19958, USA. Contact us at hello@highintentmedia.com.

2. What we collect

You give us

• Email address when you sign in via magic link or subscribe to a newsletter.
• Display name and comments when you post on articles. Comments are public.
• Saved articles and preferences when you use the save-for-later feature.
• Anything you write to us by email or contact form.

We collect automatically

• Technical logs like IP address, browser, device, referring URL, and timestamps, kept to operate and secure the site.
• Analytics via Google Analytics 4. Page views, sessions, traffic sources, and similar measurement. We do not enable cross-site advertising features, ad personalization, or Google Signals.
• Cookies and local storage as described in our Cookie Policy.

We do not collect

We do not knowingly collect special category data (health, religion, sexual orientation, political views, etc.). Do not put this kind of information in comments or emails to us.

3. Why we use it

• Run accounts, sign-in, and the comment system.
• Send newsletters and confirmations you asked for.
• Operate, secure, and improve the site.
• Respond to questions and feedback.
• Comply with legal obligations and enforce our terms.

4. Legal bases (GDPR and UK GDPR)

If you are in the EU or UK, our legal bases for processing are:

• Consent for newsletters and optional analytics where required by local law. You can withdraw consent at any time.
• Contract to provide the account features you sign up for.
• Legitimate interests to operate, secure, and improve the site, prevent abuse, and run essential analytics. You can object at any time.
• Legal obligation where the law requires us to keep or share data.

5. Who we share it with

We use a small set of vendors as processors. They only get the data they need and only to do what we ask.

• Lovable Cloud (powered by Supabase) for our database, authentication, and edge functions.
• Email service provider for transactional and newsletter emails.
• Algolia for search across the site. Search queries are processed by Algolia.
• Google (Google Analytics 4) for site measurement. See our Cookie Policy for details and opt-out.
• Image and media providers such as Pexels when articles use their imagery. Their pages set their own cookies if you load them.
• Hosting and CDN providers to serve the site.

We do not sell or rent personal information. We do not share personal information for cross-context behavioral advertising. We may disclose information when required by law, to respond to lawful requests, or to protect our rights, safety, or property.

6. International transfers

We are based in the United States. If you access the site from outside the US your information will be transferred to and processed in the US and other countries our vendors operate in. Where required we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

7. How long we keep it

• Accounts and comments: until you close your account or ask for deletion.
• Newsletter list: until you unsubscribe.
• Server logs and analytics: typically up to 24 months, shorter where reasonable.
• Records we are required to keep by law: for the period the law requires.

8. Security

We use industry-standard measures including encryption in transit, access controls, and least-privilege practices for staff and vendors. No system is perfectly secure. If we ever experience a breach that affects your data we will notify affected users as required by law.

9. Children

The Site is not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided personal information write to hello@highintentmedia.com and we will delete it.

10. Your rights

Everyone

• Access a copy of your data.
• Correct inaccurate data.
• Delete your data.
• Unsubscribe from newsletters using the link in any email.

EU and UK residents (GDPR / UK GDPR)

• Portability: get your data in a portable format.
• Restriction: ask us to pause processing while we resolve a question.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: at any time, without affecting prior lawful processing.
• Lodge a complaint with your local supervisory authority.

California residents (CCPA / CPRA)

You have the right to:

• Know what personal information we collect, the sources, and the purposes (see Sections 2 and 3).
• Access and receive a copy of your personal information.
• Delete personal information we collected from you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law.
• Limit the use of sensitive personal information. We do not collect or use sensitive personal information for inferring characteristics.
• Non-discrimination: we will not discriminate against you for exercising your rights.

Categories of personal information we have collected in the last 12 months: identifiers (email, account ID), commercial information (newsletter signups), internet activity (logs, analytics), and user content (comments). We do not collect biometric, geolocation (precise), or financial account information.

How to exercise your rights: email hello@highintentmedia.com from the email on your account. We respond within 30 days (45 days for CCPA requests, with an extension only when allowed by law). Authorized agents can submit requests on your behalf with verifiable written authorization.

11. EU and UK representative

High Intent has no establishment in the EU or UK. We are in the process of appointing an Article 27 representative. Until then, EU and UK residents can reach us directly at hello@highintentmedia.com for all GDPR and UK GDPR matters.

12. Do Not Track

Browsers send a Do Not Track signal. Industry standards on how to respond do not exist, so we do not change behavior based on it. We do not use cross-site advertising trackers, which is the practical concern Do Not Track was designed to address.

13. Changes

We will update this policy as the site and the law change. The Last updated date at the top reflects the current version. Material changes will be flagged on the Site.