Privacy Policy
Last updated: May 23, 2026
We collect minimal data to deliver a personalized news experience. We use your email for newsletters, Google profile for authentication, and privacy-first analytics. We do not sell your personal data. You have rights under GDPR, CCPA, and Taiwan's PDPA.
1. Who We Are
Connact Inc. (康耐德股份有限公司) operates the Vela platform at frontierx.news. For privacy inquiries, contact [email protected].
2. Information We Collect
Information you provide
- Email address (newsletter subscription, account registration)
- Google account information (name, email, profile picture) via Google OAuth
- Newsletter preferences (language, digest frequency, delivery channel)
- Interest and topic preferences
- Article ratings and feedback
- Unsubscribe reasons (optional)
Information collected automatically
- Pages visited, referrer URL, browser type (user agent)
- Preferred language and locale
- Timezone (for newsletter delivery optimization)
- Timestamps of visits and interactions
- IP address (processed but not stored in identifiable form)
Information we do NOT collect
- No third-party tracking cookies
- No advertising pixels or cross-site trackers
- No financial or payment information collected
- We use Plausible Analytics, a privacy-first tool that uses no cookies and collects no personal data
3. How We Use Your Information
- Deliver personalized news and newsletter content
- Authenticate your account and maintain session security
- Send newsletters and content notifications based on your preferences
- Analyze aggregate usage patterns to improve our Service
- Develop and improve our AI-assisted content production
- Ensure Service security and prevent abuse
- Comply with legal obligations
- Communicate important service updates
4. Legal Bases for Processing
- Contract performance: account registration, newsletter delivery
- Legitimate interests: analytics, service improvement, security
- Consent: newsletter subscription, interest personalization, optional communications
- Legal obligation: compliance with applicable laws
5. Data Sharing
- Service providers: cloud infrastructure (Google Cloud Platform), email delivery services — processing data on our behalf under strict contractual obligations
- Legal requirements: when required by law, regulation, legal process, or governmental request
- Business transfers: in connection with a merger, acquisition, or sale of assets, with prior notice
- Aggregated data: we may share anonymized, aggregated analytics that cannot identify you
We do NOT sell your personal data to third parties.
6. International Data Transfers
Your data may be processed in jurisdictions outside your country of residence, including the United States and Taiwan. We ensure appropriate safeguards for international transfers, including standard contractual clauses where applicable.
7. Data Retention
- Account data: retained while active, plus 30 days after deletion request
- Newsletter subscription: retained until you unsubscribe
- Analytics data: aggregated data retained indefinitely; identifiable page view logs automatically purged after 90 days
- Security logs: retained for up to 12 months
8. Data Security
We implement industry-standard security measures including encrypted connections (TLS), secure authentication (JWT with httpOnly cookies), access controls, and regular security audits. However, no method of transmission or storage is 100% secure.
9. Your Rights
European Economic Area (GDPR)
You have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. You may withdraw consent at any time.
California Residents (CCPA/CPRA)
You have the right to know what personal information we collect, request deletion, opt out of the sale of personal information (we do not sell your data), and not be discriminated against for exercising your rights.
Taiwan Residents (PDPA)
Under the Personal Data Protection Act (個人資料保護法), you have the right to request access, copies, supplementation, correction, cessation of collection/processing/use, and deletion of your personal data.
To exercise any of these rights, contact [email protected]. We will respond within 30 days.
10. Children's Privacy
The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will promptly delete it.
11. Changes to This Policy
We may update this Policy periodically. Material changes will be communicated via the Service or email. Your continued use after changes constitutes acceptance.
12. Contact
Data Protection Contact: [email protected]
Connact Inc. (康耐德股份有限公司)