Privacy policy

Who is responsible

The controller is the operator of the site, a private individual: Borislav Marinov, Knezha, Vratsa. Contact: b.marinov.dev@gmail.com.

The site is non-commercial. See also the legal notice.

In short

• No accounts, advertising or visitor profiles. Visits are counted with Vercel Web Analytics: no cookies and no cross-site tracking. The only cookie (“pr.news”) remembers the news language you choose.
• Our hosting provider processes the technical data of every request, including your IP address.
• For the daily AI limits we keep only a pseudonymised code that changes every day, and we delete it within about 8 days.
• Questions to Ask and the material for summaries are sent to Google (Gemini API).
• Your text size and your choices in Settings stay in your browser.

What we process and why

Technical data on every visit

When you open a page, your browser sends our hosting provider Vercel its IP address, the browser type, the page address and the time. The page address includes the words you search for. Vercel uses this data to deliver the page and protect the service, and records it in technical logs. We can see these logs for a short time (about 1 hour on Vercel's free plan); Vercel states that it processes this data on its customers' behalf under its Data Processing Addendum. Legal basis: our legitimate interest in running and securing the site (Article 6(1)(f) of the General Data Protection Regulation, GDPR).

Protection against overload

To limit floods of requests to search, browsing, Ask, summaries and photos, the server counts the requests from each IP address for one minute. The counters are kept only in server memory, briefly, until the server instance restarts; they are never written to the database. Legal basis: legitimate interest.

Daily AI limits

When you ask a question or request a new summary, we compute a code from your IP address and the current date (UTC) with a secret value (HMAC-SHA256), and store only that code and your number of requests for the day. The IP address itself is not stored. The code is different every day, so separate days cannot be linked without the secret key. Because the operator holds the secret value, the code is pseudonymised, not anonymous. The records are deleted within about 8 days (at the next automatic clean-up after day 7). A summary that already exists does not count. Legal basis: our legitimate interest in protecting the free service and its costs from abuse, with the same limits for everyone.

Summaries and Ask (Google Gemini)

When you press “Summarize with AI” or ask a question, your question and the selected headlines and permitted excerpts stored here are sent to Google (Gemini API). For the article, Gemini searches the web with Google Search, so Google also processes the searches Gemini makes. The request leaves from our server, so Google does not get your IP address from us. For the short lines under headlines our server sends Google only headlines and outlet names, with no visitor data. We do not record the questions or the answers. Finished articles and summaries, with the list of sources used, are kept in our database while the story is on the site (articles are kept for up to 30 days) and are shown to other visitors too; they contain no visitor data.

Google is the provider of the Gemini API and receives the data described here. The site uses the free tier of the Gemini API. Under Google's terms for it, Google may use the prompts and responses to improve its products and Google staff may review them; Google also keeps them to detect abuse and where the law requires it. Do not type personal or sensitive information into your questions.

E-mails to us

If you write to us, we use your address and message only to reply and to handle your request, and keep them only as long as that takes.

What stays only in your browser

We use one cookie: pr.news. It is set only when you choose a news language (with the language switch or “News in” in Settings) and contains only “bg” or “en”. It lets us show the news in the language you chose. It holds no personal data, is not shared with third parties and is not used for tracking. Your browser sends it to our server with each request; it expires after 12 months, and you can delete it at any time by clearing this site's data. The cookie is protected (Secure, SameSite=Lax).

Besides that, in the browser's storage (localStorage) we keep only what you choose yourself, and only for the feature you asked for:

• pr.textsize: text size. Removed when you go back to the normal size.
• pr.prefs.v1: the “Verified only” choice (later also hidden topics, outlets and words). Removed when you turn the choice off or clear this site's data.

The localStorage entries never leave your device. You can delete everything, including the cookie, by clearing this site's data in your browser. The cookie and these entries are needed for a service you explicitly asked for (news language, text size, hiding news) and are never used for tracking, so we do not ask for consent with a banner (Article 4a(4)(2) of the Bulgarian Electronic Commerce Act).

Service providers and transfers outside the EU

• Vercel Inc. (hosting): the site's functions run in Frankfurt, Germany, and pages are delivered through Vercel's worldwide network; Vercel's primary facilities are in the United States. Vercel states that it processes data under its Data Processing Addendum and relies, for transfers, on the EU Standard Contractual Clauses (Decision 2021/914) and on its certification under the EU-U.S. Data Privacy Framework.
• Neon (database, part of Databricks): the data is stored in the Frankfurt, Germany region. Neon is a US company and relies on the EU-U.S. Data Privacy Framework for transfers (for example for support).
• Google (provider of the Gemini API): receives the questions and summary material described above, handles them under its Gemini API terms and may process them outside the EU.

How long we keep data

• Daily-limit codes: up to about 8 days.
• The “pr.news” cookie: 12 months or until you delete it.
• Overload counters: only in server memory, briefly, until the server instance restarts.
• Technical logs: we can see them for about 1 hour; Vercel keeps them under its own terms.
• Summaries: while the story is on the site (up to about 30 days).
• Ask questions and answers: we do not record them.
• E-mails to us: as long as needed to reply and handle the request.

Your rights

You have the right of access, rectification, erasure and restriction of processing, and the right to object to processing based on legitimate interest (Articles 15 to 18 and 21 GDPR). Write to us at b.marinov.dev@gmail.com. We reply within one month. Because we keep no IP addresses, only a daily code, we usually cannot link a record to a particular person; if so, we will tell you (Article 11 GDPR).

You have the right to lodge a complaint with the supervisory authority, the Bulgarian Commission for Personal Data Protection (CPDP): Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., kzld@cpdp.bg, cpdp.bg.

Changes

If we change how we process data, we will update this page and the date at the top.