Privacy

What we measure

You can read Press Hound without an account, and then it asks for no personal details. To see which pages and features are used, it counts visits with PostHog, an analytics service. If you create an account, we also keep what is listed under Accounts.

What is recorded

• Pages viewed, and the page that sent you here.
• Clicks on links and controls, text you copy, and what you search for in the keyword search. Nothing else you type into a field.
• How fast pages load, and your browser, device and screen size.
• Recordings of how you use the site (session replay): what is on screen, scrolling and clicks, with anything typed into a field masked. Only when the analytics cookie is in use.
• Your IP address, and roughly where you are (country and region) worked out from it.

The analytics cookie

With the cookie, PostHog keeps a random id and the current session in a cookie and in your browser's local storage for up to a year, so a later visit counts as the same visitor. Nothing else about you is stored there.

If you decline, nothing is stored on your device. Your visit is still counted, by a code PostHog computes from your IP address and browser that changes every day, so visits on different days can't be linked. Your IP address and location aren't recorded then, and there are no recordings.

Visitors from the European Union, the rest of the EEA, the United Kingdom and Switzerland are asked first. Elsewhere the cookie is used unless your browser sends a Global Privacy Control signal, which we treat as declining.

Accounts

An account is optional. For one, we store:

• Your name and email address, and whether you've confirmed the address. We email it only about the account: the link to confirm it, a link to reset your password when you ask for one, a note when your password was changed, the link to delete the account, and a note if someone tries to sign up with your address. If you turn on the digest on the settings page, we also send it daily or weekly. An account whose address was never confirmed is replaced when someone signs up with that address again.
• Your password, only as a one-way hash, never in a form we can read.
• Your settings: the keywords you follow, the queries you save with the names you give them, and how often you want the digest email. For each digest we send, we keep when it was sent and Resend's id for it.
• Each sign-in session, with the IP address and browser it started from, until it expires a week after its last use or you sign out.
• For an emailed link, until it is used or expires (one hour, a day for deleting the account): a one-time code tied to your address or account.
• Your role (member or administrator) and, if an administrator blocked the account, the reason and how long the block lasts.

A few administrators look after the accounts. They can see the details above (never your password), correct your name or email, set a new password, end your sessions, block or remove the account, and, to look into a problem, sign in as you for up to an hour. Such a session is stored with the administrator who opened it.

You can change your password and delete your account on the settings page, and turn the digest off there or with the unsubscribe link in every digest. Deleting asks you to confirm with a link we email you; opening it removes the account, your settings and your sessions at once.

While you're signed in, a session cookie keeps you signed in. It is needed for the account to work, so it is set whatever you chose about the analytics cookie. The data is stored in a Postgres database at Neon in the United States.

If you accepted the analytics cookie, your visits are linked to your account while you're signed in: PostHog receives your account id, name, email address and role. If you declined, your visits stay anonymous.

We switch some features on gradually or try out versions of them with PostHog's feature flags. While you're signed in, our server asks PostHog which ones apply to your account, whatever you chose about the analytics cookie, so a feature works the same on every device. It sends only your account id and role; PostHog records no visit or event for it. That your account saw a version we are trying out is recorded only if you accepted the analytics cookie.

Who processes the data

PostHog stores the analytics in the United States; the data passes through our own domain first. Errors in the site are reported to Sentry with technical details of the browser. Account and digest emails are sent through Resend in the United States, which receives your name, email address and the email itself. The site is hosted on Vercel. None of this is sold or used for advertising.

Other storage

Your light or dark theme choice is kept in your browser's local storage. It never leaves your device. The session cookie is described under Accounts.