General provisions

This Privacy Policy explains how BULLETIN.OBSERVER processes personal data when you visit or use the website:

https://bulletin.observer/

including the Russian-language version:

https://bulletin.observer/ru/

BULLETIN.OBSERVER is a news and information website that provides access to news articles, story updates, newsletters, subscriptions, user accounts, comments and related features.

Data controller: Rudniev Oleksii

Contact email: al.iv.rudnev@gmail.com

This Privacy Policy applies to information collected or received when you visit the website, create or use an account, sign in with Google, subscribe to newsletters or story updates, post comments, contact us, or otherwise interact with BULLETIN.OBSERVER.

What data is collected

Depending on the features used by the visitor, the following categories of data may be processed.

Information voluntarily provided by the user

This may include:

email address when subscribing to a newsletter;
name or other information voluntarily entered by the user;
the contents of messages submitted through contact or feedback forms;
information required to manage a subscription.
Technical information

The website may process:

IP address;
date and time of access;
requested URL or page;
browser and device information;
interface language;
technical session identifiers;
information about interaction with the website.
Subscription information

This may include:

email address;
selected subscription language;
subscriptions to individual stories or other services, where such features are available;
subscription date and status changes.

The website does not intentionally request special categories of personal data unless a particular form and accompanying notice expressly provide otherwise.

Information received from Google

BULLETIN.OBSERVER provides an optional Sign in with Google authentication method.

When you choose to sign in or register using Google, Google may provide BULLETIN.OBSERVER with basic Google Account information after you authorize the application.

Depending on the information made available by Google, this may include:

your Google account unique identifier (sub);
your name;
your email address;
your profile picture.

BULLETIN.OBSERVER does not receive your Google Account password.

BULLETIN.OBSERVER requests only the OAuth scopes necessary for authentication and basic account information:

openid;
email;
profile.

We do not request access to Google Drive, Gmail, Google Contacts, Google Calendar, Google Photos or other unrelated Google Account data.

Google's own documentation confirms that Sign in with Google can provide an application with basic profile information such as name, email address and profile picture, but does not provide the user's Google password.

How Google Account information is used

Information received through Google Sign-In is used only to provide and operate account and authentication functionality on BULLETIN.OBSERVER.

Specifically, Google-provided information may be used to:

create a BULLETIN.OBSERVER user account when you register using Google;
authenticate you when you sign in;
identify your existing BULLETIN.OBSERVER account;
link your Google Account to an existing BULLETIN.OBSERVER account when you request or authorize such linking;
display your name or profile picture as your account information;
associate comments, replies, subscriptions and other account-related activity with your BULLETIN.OBSERVER account;
maintain account security and prevent unauthorized access;
communicate with you about your account or requested website services.

Your Google email address may also be used to identify whether a BULLETIN.OBSERVER account already exists and, where applicable, to associate your Google authentication with that account.

We do not use Google user data for:

targeted advertising;
personalized advertising;
selling to data brokers;
selling user profiles;
credit scoring;
unrelated marketing purposes;
creating advertising databases;
training generalized AI or machine-learning models.

Google user data is used only for providing or improving user-facing functionality of BULLETIN.OBSERVER.

Google Account data storage

When you use Google Sign-In, BULLETIN.OBSERVER may store information necessary to maintain your user account and authentication relationship.

This may include:

the Google account unique identifier (sub);
email address;
name;
profile picture URL or related profile information, where used;
information indicating that the account is linked to Google;
authentication and security timestamps;
account creation and update information.

OAuth access tokens or other authentication credentials, if temporarily processed by the application, are handled only as necessary for the authentication process and are not used for unrelated purposes.

BULLETIN.OBSERVER does not store your Google Account password.

Account linking

If you already have a BULLETIN.OBSERVER account, Google Sign-In may be used to authenticate that account where the application can reliably establish the account relationship.

Google account information is not used to create an unrelated second account when an existing account can be safely identified and linked according to the application's account-linking rules.

Users may contact us regarding unlinking their Google authentication from their BULLETIN.OBSERVER account.

User comments and public information

Registered users may be able to post comments and replies on articles.

Information intentionally submitted as part of a public comment may be displayed to other website visitors.

Users should not publish passwords, financial information, private contact information or other sensitive personal information in public comments.

BULLETIN.OBSERVER may moderate, remove or restrict comments that violate applicable rules or laws.

Newsletter and story subscriptions

If you subscribe to a newsletter or follow a story, BULLETIN.OBSERVER may process:

email address;
selected language;
subscription type;
subscribed story or service;
subscription date;
subscription status;
unsubscribe information.

These data are used to provide the requested email notifications and subscription services.

Users may unsubscribe from newsletters or story notifications using the available unsubscribe mechanism or by contacting us.

10. Cookies and similar technologies

BULLETIN.OBSERVER may use cookies and similar technologies for:

authentication;
session management;
security;
remembering language preferences;
storing user preferences;
maintaining website functionality;
analytics where such tools are enabled.

Necessary cookies may be used where permitted by applicable law.

Where consent is legally required for non-essential cookies or similar technologies, users will be provided with an appropriate choice.

Purposes of processing

Personal data may be processed for the following purposes:

providing access to website features;
processing newsletter subscriptions;
sending informational emails and notifications;
managing subscriptions and unsubscribe requests;
responding to user enquiries;
maintaining website security and preventing abuse;
maintaining and improving website functionality;
diagnosing technical problems;
analysing use of the website where relevant tools are enabled;
complying with applicable legal obligations.

Personal data will not be used for purposes incompatible with those described in this Policy without providing additional information and, where required, obtaining the user's consent.

Legal grounds

The legal basis for processing depends on the specific purpose and the applicable law.

Depending on the circumstances, processing may be based on:

the user's consent;
performance of a contract or steps taken at the user's request prior to entering into a contract;
compliance with a legal obligation;
the legitimate interests of the controller or a third party, where those interests are not overridden by the user's rights and freedoms;
another legal basis permitted by applicable law.

Where processing is based on consent, the user may withdraw that consent where provided by applicable law.

Storage and protection of data

Personal data is retained for as long as necessary to fulfil the relevant purpose, unless a longer retention period is required by applicable law.

Once the purpose of processing has been fulfilled, personal data will be deleted, anonymised, or otherwise no longer processed where continued retention is not legally required.

Reasonable organisational and technical measures are used to protect personal data against:

unauthorised access;
alteration;
disclosure;
loss;
destruction;
other unlawful processing.

However, no method of transmission or storage over the internet can guarantee absolute security.

Transfer to third parties

Certain data may be processed by third parties that provide technical or other services necessary for the operation of the website.

These may include categories such as:

hosting providers;
email and mail-delivery infrastructure providers;
technical monitoring and security providers;
analytics providers, where such tools are used;
other technology providers necessary for operating the website.

Data is disclosed only to the extent necessary for the relevant purpose.

Where applicable law requires data-processing agreements, contractual safeguards, or specific measures for international transfers of personal data, the controller will take such measures.

A specific list of service providers and technologies used by the website may be provided by the controller where required.

User rights

Depending on applicable law, users may have the right to:

obtain information about the processing of their personal data;
access their personal data;
request correction of inaccurate or incomplete data;
request deletion of their data;
request restriction of processing;
object to certain processing activities;
withdraw consent previously given;
receive personal data in a portable format where applicable;
lodge a complaint with a competent data-protection authority.

Requests concerning personal data may be submitted to:

al.iv.rudnev@gmail.com

To protect against unauthorised disclosure of personal data, the controller may request additional information reasonably necessary to verify the identity of the requester.

Cookies

The website may use cookies and similar technical technologies.

Cookies may be used for:

website functionality;
storing user preferences;
session management;
remembering language preferences;
security;
analysing website usage where relevant tools are enabled.

Necessary cookies may be used without separate consent where permitted by applicable law.

For other categories of cookies, where consent is legally required, users will be given an appropriate choice to accept or reject them.

Users may also control or disable cookies through their browser settings. Disabling certain cookies may affect the availability or functionality of some website features.

Changes to the policy

The controller may update this Privacy Policy when the website, technologies, processing activities, or applicable legal requirements change.

A new version will be published on this page with its effective date and, where appropriate, its version number.

Changes take effect upon publication unless a different effective date is stated in the updated version.

Contacts for personal data matters

Email for personal data matters: [email protected]

For questions concerning personal data, the exercise of user rights, or this Privacy Policy, please contact:

Analytics

The site uses Google Analytics 4 and Yandex Metrica. They load only after you consent to analytics cookies in the banner; without consent no requests are sent to these services. Google Analytics uses Consent Mode with advertising signals off. Yandex Metrica Session Replay (Webvisor) is enabled on the Russian version to analyse usability; the contents of form fields — email, password, comments — are not recorded. Counters are not loaded on the sign-in, registration and profile pages or for signed-in readers. Providers process data under their own policies: Google, Yandex. You can withdraw consent with “Cookie settings” at the bottom of any page.