Privacy Policy
Effective date: July 25, 2026
This Privacy Policy explains how Consensus Daily (“Consensus Daily,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you visit consensusdaily.com (the “Service”). By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.
1. Summary
You can read Consensus Daily without an account and without accepting any optional cookies. If you choose to create an account, we store your email address, a name you supply, a public username, and a securely hashed password. We display advertising through Google AdSense and measure traffic with Google Analytics; both set cookies, and in the EEA, the UK, and Switzerland neither runs until you consent. We do not sell personal information for money, although the use of advertising cookies may be treated as “sharing” or a “sale” under some US state laws. You can withdraw consent at any time using the Cookie settings link in the footer.
2. Information We Collect
Information you give us when you create an account. Creating a reader account requires an email address and a password. You may also provide a first and last name, and you choose a username. We store:
- Email address— used to sign in, to confirm your account, to reset your password, and to send the newsletter if you asked for it. Never shown publicly.
- Password— stored only as a bcrypt hash. We cannot read your password, and neither can anyone who obtains a copy of our database.
- First and last name— optional. Shown only to you, on your own account page. It never appears anywhere on the public site.
- Username — public. This is the name shown beside anything you post in the comments. Choose it accordingly; you can change it at any time.
- Profile photo— optional. Public if you upload one. Images are resized in your browser before upload, which also removes embedded camera metadata such as GPS location.
- Account activity— the articles you save, your newsletter preferences, the comments you post, and the dates your account was created and last had its password changed.
Information you give us without an account. If you subscribe to the newsletter using a form on the site, we store your email address, any name you supply, and the date and source of your subscription. If you contact us, we receive whatever you put in that message.
Information collected automatically. Our hosting provider and analytics tools receive your approximate location (typically country or region), device and browser type, operating system, pages viewed, referring website, and the date and time of your visit. Our hosting infrastructure also processes IP addresses transiently in order to deliver and secure the Service, including for rate limiting.
3. Cookies and Similar Technologies
Essential cookies are the ones the site can’t work without. Analytics and Advertising cookies are optional and controlled by your choices.
| Cookie | Set by | Purpose | Expires | Category |
|---|---|---|---|---|
| authjs.session-token | Consensus Daily | Keeps you signed in. Only set once you sign in. | 30 days | Essential |
| cd_consent | Consensus Daily | Remembers your cookie choices so we stop asking. | 6 months | Essential |
| _ga, _ga_* | Google Analytics | Counts visits and tells us which stories are read. | Up to 2 years | Analytics |
| IDE, DSID, __gads, __gpi | Google AdSense | Serves and measures advertising, including personalised ads. | Up to 13 months | Advertising |
In the EEA, the UK, and Switzerland, no analytics or advertising cookies are set until you accept them. Elsewhere they are on by default and the banner turns them off.
Changing your mind. Use Cookie settings in the footer of any page. Changes take effect immediately. We remember your choice for six months, then ask again.
Rejecting advertising doesn’t remove ads — they pay for the reporting. It makes them non-personalised: chosen from the page you’re on rather than from your browsing history.
4. Analytics
We use Google Analytics to understand which stories are read and how people arrive. Analytics cookies are optional and are governed by your consent choice as described above. We also use Vercel Analytics and Speed Insights, which our hosting provider operates in an aggregated, cookie-free form to measure performance.
5. Advertising
We use Google AdSense to display ads. Google and its partners may use cookies and similar technologies to serve ads based on your prior visits to this and other sites, and to measure ad performance. In the EEA, the UK, and Switzerland this only occurs after you consent.
You can additionally opt out of personalised advertising at myadcenter.google.com, across many vendors at aboutads.info/choices, or, in Europe, at youronlinechoices.eu.
6. Comments and Public Content
Comments are public. Your username and profile photo appear beside anything you post; your real name and email address do not. Comments require a confirmed email address. You may delete your own comments, and we may remove comments that breach our Terms.
Usernames released by a change are held for 90 days before anyone else can take them, so that a handle readers associate with one person’s comment history cannot immediately be adopted by another.
7. Email We Send
Account email— confirmation, password reset, and security notices such as an alert to your existing address when someone requests an email change. These are necessary to operate your account and are not marketing.
The Consensus Digest— sent only if you asked for it, either by ticking the box at signup or by using a subscription form. We record when and where you consented. Every issue carries a working unsubscribe link, and account holders can adjust or switch off all email from the Newsletter section of their account page.
8. How We Use Information
- to operate, maintain, and deliver the Service;
- to create and secure your account, and to authenticate you when you sign in;
- to send the email described above;
- to analyse usage and trends so we can improve the content and the site;
- to detect and prevent abuse, fraud, spam, and security incidents, including by rate limiting;
- to respond to your enquiries; and
- to comply with legal obligations and enforce our Terms of Service.
9. Legal Bases (EEA, UK, and Switzerland)
- Contract— creating and running your account, and sending the account email that makes it work.
- Consent— analytics cookies, advertising cookies, and the newsletter. You may withdraw consent at any time without affecting processing already carried out.
- Legitimate interests— keeping the Service secure and available, preventing abuse, and defending legal claims.
- Legal obligation— where the law requires us to retain or disclose information.
10. Service Providers
We rely on a small number of providers to run the Service. Each processes only what it needs to:
- Vercel — hosting, content delivery, performance analytics, and image storage for profile photos.
- Neon — the PostgreSQL database holding accounts, comments, saved articles, and preferences.
- Resend — delivery of account email and the newsletter.
- Google — AdSense advertising and Google Analytics. Google acts as an independent controller for advertising.
Our articles may also link to third-party sites, and may embed images or video hosted elsewhere. This Policy does not cover those sites. See how Google uses information from sites that use its services.
11. How We Share Information
We do not sell, rent, or trade personal information for money. We share it only: (a) with the service providers listed above, to deliver the Service; (b) where required by law, regulation, legal process, or a governmental request; (c) to protect the rights, property, or safety of Consensus Daily, our readers, or the public; or (d) in connection with a merger, acquisition, or sale of assets, where any successor is bound by this Policy. Note that the use of advertising cookies may constitute “sharing” for cross-context behavioural advertising under California law; rejecting Advertising cookies stops it.
12. Data Retention
- Account data — kept while your account exists, and deleted when you ask us to delete it.
- Comments — removed comments are hidden immediately and deleted with your account.
- Newsletter records — kept while you are subscribed, plus a record of unsubscription so we do not email you again.
- Sign-in and reset tokens — stored only as hashes, single-use, and expiring within 1 to 24 hours.
- Analytics — retained by Google under its own retention settings.
13. Data Security
Passwords are stored as bcrypt hashes and never in readable form. Email confirmation and password-reset links are stored as SHA-256 hashes, expire, and work once. Changing your password invalidates existing sessions on other devices. Traffic is served over HTTPS with a strict Content Security Policy. No system is perfectly secure, and we cannot guarantee absolute security, but we take these measures seriously.
14. Children’s Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us at info@learnmyev.com and we will delete it.
15. Your Privacy Rights
Depending on where you live, you may have rights under the GDPR, the UK GDPR, the California Consumer Privacy Act as amended by the CPRA, or similar laws. These may include the right to access, correct, delete, or receive a portable copy of your personal information; to object to or restrict certain processing; to withdraw consent; to opt out of “sale” or “sharing”; and not to be treated differently for exercising any of them.
Several of these you can exercise yourself, immediately: view and correct your name, username, email, and photo on your account page; manage or stop all email from the same page; and withdraw cookie consent from the footer of any page. To request access, a copy, or deletion of your account and everything attached to it, email info@learnmyev.com from the address on the account. We will respond within the time the applicable law allows. You also have the right to complain to your local data protection authority.
16. Do Not Track and Global Privacy Control
There is no common industry standard for interpreting browser “Do Not Track” signals, and the Service does not currently respond to them. If you are in a jurisdiction that recognises the Global Privacy Control signal, you may use the Cookie settings link to reject Advertising cookies, which achieves the same result.
17. International Visitors
The Service is operated from the United States. If you access it from elsewhere, your information may be processed in the United States or in other countries where our providers operate, which may have data-protection laws that differ from those where you live. Where required, our providers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
18. Changes to This Policy
We may update this Policy from time to time. When we do, we will revise the effective date above. If a change affects what we collect or how we use it, we will ask for consent again where the law requires it. Continued use of the Service after a change constitutes acceptance of the updated Policy.
19. Contact
Questions or requests about this Policy: info@learnmyev.com.