We may collect and process:

• Account and identity: If you sign in (e.g. via Google, or admin login), we store identifiers, email (if provided), name, and profile data necessary to run your account.
• Usage and technical data: Logs (IP, browser, device, timestamps), pages visited, and similar data needed for security, debugging, and improving the service.
• Cookies and similar technologies: As described in the Cookies section below.
• Communications: If you contact us (e.g. by email), we keep the content and metadata of your messages as needed to respond and comply with legal obligations.

Where GDPR or UK GDPR applies, we process personal data on the following bases:

• Contract: To provide the service you use (e.g. account, comments, access to content).
• Consent: Where we ask for your consent (e.g. non-essential cookies, optional features). You can withdraw consent at any time.
• Legitimate interests: For security, fraud prevention, analytics (where lawful), and improving our services, where our interests are balanced with your rights.
• Legal obligation: Where we must retain or disclose data to comply with law.

We use the data we collect to:

• Provide, operate, and improve uxc.news (including authentication, comments, and content access).
• Understand how the site is used (e.g. analytics, when you have consented or where otherwise lawful).
• Comply with law, enforce our terms, and protect our rights and users’ safety.
• Respond to your requests and communicate with you (e.g. support, updates).

We may share data with:

• Service providers: Hosting, analytics (where consented or otherwise lawful), email, and other processors that help us run the site, under strict agreements.
• Auth providers: If you sign in with Google (or similar), that provider receives the data required for authentication; their privacy policies apply.
• Legal and safety: When required by law or to protect rights, safety, or property.

We do not sell your personal data. Where we use third-party services that might be considered a “sale” or “share” under US state laws (e.g. certain analytics or advertising), we will honour your choices (e.g. opt-out) as described in Your rights.

We respect your rights under applicable law. Depending on where you live, these may include:

• EU/EEA and UK (GDPR): Access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, objection, withdrawal of consent, and the right to lodge a complaint with a supervisory authority.
• United States (e.g. CCPA and similar state laws): Right to know what data we collect and how it’s used; right to delete; right to opt out of “sale” or “sharing” (we do not sell personal data; where a service might be treated as a sale/share, we honour opt-out); right to non-discrimination for exercising your rights.
• Other regions: We aim to honour equivalent rights (access, correction, deletion, objection, etc.) where required by local law.

We honour opt-out signals where required by law (e.g. Global Privacy Control for California and other participating jurisdictions). To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by your jurisdiction (e.g. one month under GDPR, or as specified under US state laws including CCPA).

We use cookies and similar technologies as follows:

• Necessary: Required for the site to function (e.g. session, authentication, security). These do not require your consent under GDPR but we list them for transparency.
• Preferences: Remember your choices (e.g. language, theme). We use these only with your consent.
• Analytics: To understand how the site is used (e.g. page views, anonymized statistics). We use these only with your consent where required.
• Marketing: Any advertising or third-party tracking we may use. We use these only with your consent.

You can refuse non-essential cookies with one click (“Reject non-essential”) and change your choices at any time via Cookie settings. We do not use dark patterns: accept and reject are equally visible. On your first visit we ask for your consent where required (e.g. in the EU/EEA and UK).