Privacy Policy

1. Who is responsible

This policy explains how Viche (viche.news, the “Service”) handles personal data. For any privacy question or request, contact support@viche.news.

2. What we collect

Reading the Service requires no account. Depending on how you use it, we process:

• Technical data — IP address, browser and device information in infrastructure logs (Cloudflare), kept briefly for security and delivery.
• Usage analytics — pages viewed and interactions, collected via PostHog (EU region) through a first-party endpoint. For visitors without an account this is not tied to an identified profile; “Do Not Track” is respected, and you can decline analytics cookies via the cookie banner.
• Local preferences — theme, language, reading history for the personalised teaser, and your cookie choice are stored in your browser's local storage and are not sent to us.
• Account data — if you sign up: your e-mail address (via Google sign-in or a magic link, processed by Supabase), username, and your community activity (votes, comments, saves, follows, flags, source challenges and proposals).

3. Cookies

Essential cookies keep you signed in (Supabase authentication) and remember your consent choice; they are required for the Service to work. Analytics cookies (PostHog) are used to understand how the Service is used. If you choose “Deny” in the cookie banner, analytics collection is switched off for your browser; essential cookies remain.

4. Why we process data

• to provide the Service and community features (performance of a contract);
• to secure the Service and prevent abuse, including rate limiting (legitimate interest);
• to understand aggregate usage and improve the product (consent / legitimate interest);
• to moderate community content and handle reports (legitimate interest / legal obligation).

We do not sell personal data and do not use it for third-party advertising.

5. Who processes data for us

We use a small set of processors: Supabase (database and authentication, EU region), PostHog (analytics, EU region), Cloudflare (hosting and delivery), and Google (only if you choose Google sign-in). Each processes data under its own data-processing terms. Data may be disclosed where the law requires it.

6. What is public

Your username, comments and vote counts on stories are public by design. Do not put personal information you wish to keep private into public content.

7. Retention

Account data is kept while the account exists; community contributions may remain in anonymised form after account deletion where they are part of public discussions. Analytics data is retained per PostHog's retention settings; infrastructure logs are short-lived.

8. Your rights

Under the GDPR and the Law of Ukraine “On Personal Data Protection” you may request access, correction, deletion, restriction, portability, object to processing, and withdraw consent at any time — write to support@viche.news. You may also complain to your data-protection supervisory authority.

9. Security and children

Data is encrypted in transit; database access is restricted by row-level security. The Service is not directed at children under 16, and we do not knowingly collect their data.

10. Changes

We may update this policy; the current version with its effective date is always on this page, and material changes will be announced on the site.