Privacy Policy

This policy explains the information Local in English handles, why it is needed and the choices available to members.

Last updated: 12 September 2026

Information we handle

• Account information: email address, username, display name and optional profile details.
• Member content: Community posts and replies, Classified listings, reports and moderation records.
• Private communications: messages sent through the Classifieds messaging feature.
• Technical and safety information: authentication records, IP/device and ordinary service logs, security events and human-verification results needed to operate and protect the site.
• Advertising measurement: aggregate advertisement impressions and clicks. Our current system does not attach these events to a named member profile.

Purposes and legal bases

• Contract and requested services: creating accounts, publishing requested submissions, delivering messages and providing account features.
• Legitimate interests: operating and securing the service, preventing fraud and abuse, moderating content, measuring aggregate site and advertisement performance, and improving reliability.
• Legal obligations: responding to valid legal requests, keeping required business records and protecting legal rights.
• Consent: where the law requires a choice, including any optional cookies or direct marketing introduced in future. Consent can be withdrawn at any time.

Public and private areas

Community posts, replies, profile display names and Classified listings may be public once approved. Classified messages, sign-in information and account email addresses are private and are not published as part of those features. Information posted publicly may be indexed or copied by third parties.

AI and editorial data

Our AI-assisted editorial pipeline receives public source material such as public headlines, summaries, source names, publication times and links. It helps prepare English-language editorial drafts, summaries and relevance scores. The pipeline is deliberately separate from member profiles and private Classified messages.

Service providers and transfers

Supabase provides authentication and database services, Vercel hosts the website, and Cloudflare provides Turnstile human verification. Other carefully selected providers may support the public editorial workflow. A provider may process data outside Luxembourg or the European Economic Area. Where required, we rely on an adequacy decision, standard contractual clauses or another lawful transfer safeguard.

Retention

Account information is normally kept while an account remains active. Public submissions remain until removed, the account is deleted or retention is no longer necessary. Private messages and moderation, security and technical records are retained only as long as reasonably needed for the service, abuse prevention, disputes and legal obligations. Aggregate advertising totals do not directly identify a member. Deletion from backups and technical logs may take additional time, and limited records may be retained where the law or the protection of legal rights requires it.

Security

We use access controls, row-level database rules, password-leak screening, human verification and moderation safeguards. Access to private information is limited according to operational need, but no online service can promise absolute security.

Your rights

Subject to the GDPR and applicable law, you may request access, correction, deletion or a copy of your personal data; restrict or object to certain processing; and withdraw consent where processing relies on consent. You may also complain to Luxembourg’s Commission nationale pour la protection des données (CNPD). We may need to verify your identity before acting on a request.

Cookies

Our current launch service uses essential authentication, security and limited interface storage. See the Cookie Policy for details. Optional tracking will not be introduced without updating the information and controls provided to visitors.

Contact

For a privacy request, use our contact page and clearly mark the message “Privacy”, or write to the controller at the postal address above.