Privacy Policy
Last updated: February 25, 2026
Ultimate News ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the General Data Protection Regulation (GDPR) and Estonian data protection laws.
Contents
1. Data Controller Information
The data controller responsible for your personal data is:
Ultimate News
Tallinn, Estonia
Data Protection Officer: dpo@ultimate.news
2. Data We Collect
We collect the following categories of personal data:
2.1 Information You Provide
- Account information (name, email address, password)
- Profile preferences and settings
- Payment and billing information
- Communications with our support team
- Feedback and survey responses
2.2 Information Collected Automatically
- Device information (browser type, operating system)
- IP address and approximate location
- Usage data (pages visited, features used, time spent)
- Cookies and similar tracking technologies
- Log data and analytics information
2.3 Information from Third Parties
- Authentication providers (Google, GitHub) when you choose to sign in with them
- Payment processors for transaction verification
3. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR Article 6:
Contract Performance (Art. 6(1)(b))
Processing necessary to provide our intelligence services and fulfill our contractual obligations to you.
Legitimate Interests (Art. 6(1)(f))
Processing for our legitimate business interests, such as improving our services, fraud prevention, and security.
Consent (Art. 6(1)(a))
Processing based on your explicit consent, such as marketing communications and optional analytics.
Legal Obligation (Art. 6(1)(c))
Processing required to comply with applicable laws and regulations.
4. How We Use Your Data
We use your personal data for the following purposes:
- Providing and maintaining our intelligence services
- Processing your subscription and payments
- Personalizing your news feed and alerts
- Communicating with you about service updates
- Analyzing usage patterns to improve our platform
- Ensuring the security and integrity of our services
- Complying with legal obligations
- Sending marketing communications (with your consent)
5. Data Sharing and Transfers
We may share your personal data with:
- Service Providers: Third-party companies that help us operate our platform (hosting, analytics, payment processing)
- Legal Requirements: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets
Google Sign-In Data
If you choose to sign in with Google (OAuth), we receive basic profile information from Google to create and manage your account (typically name, email address, and profile picture). We do not request access to your Google Drive, Gmail, or other Google services.
International Transfers
When we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Transfers to countries with an adequacy decision
- Other legally approved transfer mechanisms
6. Data Retention
We retain your personal data for as long as necessary to:
- Provide our services to you
- Comply with legal obligations (e.g., tax and accounting requirements)
- Resolve disputes and enforce our agreements
Retention Periods
- Account data: Duration of account + 30 days
- Transaction records: 7 years (Estonian accounting law)
- Usage logs: 90 days
- Marketing preferences: Until consent is withdrawn
7. Your Rights Under GDPR
As a data subject, you have the following rights under GDPR:
Right of Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your data ("right to be forgotten")
Right to Restriction
Limit how we process your data
Right to Portability
Receive your data in a structured format
Right to Object
Object to processing based on legitimate interests
Right to Withdraw Consent
Withdraw previously given consent at any time
Right to Lodge Complaint
File a complaint with a supervisory authority
To exercise any of these rights, please contact us at dpo@ultimate.news. We will respond within 30 days as required by GDPR.
You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):
8. Cookies and Tracking
We use cookies and similar technologies (such as localStorage) to operate the Service and understand how it is used:
Essential Cookies
Required for authentication, session management, and core platform functionality. These cannot be disabled without breaking the Service.
Analytics Cookies
We use PostHog, a privacy-focused analytics tool, to understand how you interact with the Service. PostHog sets a cookie to assign an anonymous identifier and uses localStorage to maintain session data. Analytics data is sent through our own proxy server and is not shared with third-party advertising networks. No personally identifiable information is stored in these cookies.
You can manage cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning correctly. You may also use browser-level tracking protection features to limit analytics collection.
9. Security Measures
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit (TLS 1.3) and at rest (AES-256)
- Regular security audits and penetration testing
- Access controls and authentication mechanisms
- Employee training on data protection
- Incident response procedures
- Regular backups with encrypted storage
10. Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at dpo@ultimate.news.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will also send you an email notification.
We encourage you to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Data Protection Officer: dpo@ultimate.news
Postal Address:
Ultimate News
Attn: Privacy Team
Tallinn, Estonia