Privacy policy

Who we are

This policy explains how Midnight Media (“Midnight”, “we”, “us”) handles personal information when you use themidnightnews.com and related services (the “Service”). Midnight is the controller of the personal information described here.

Questions about this policy or your data can be sent to support@themidnightnews.com.

Information you give us

• Account details — your email address, display name and a password when you create an account. Passwords are stored only in hashed form by our authentication provider; we can never see them.
• Community activity — comments, replies, likes and saved stories you choose to make while signed in.
• Messages — anything you send us by email, such as a correction, a tip or a support request.

Information collected automatically

• Reading statistics — the page you visited, the referring site, the type of device (mobile, tablet or desktop) and the time of the visit. Each visit is linked to a random identifier created in your browser, not to your name or email.
• Analytics — we use Google Analytics to understand how the Service is used in aggregate. Google processes this information under its own privacy policy.
• Security data — a one-way hash of your network address is used to limit abuse such as repeated sign-up attempts and automated attacks.

Browser storage

We do not use advertising or tracking cookies. To work properly, the Service keeps a small amount of information in your browser's local storage: the random reading identifier described above and, if you sign in, your session so you stay signed in. You can clear this at any time from your browser settings; doing so signs you out.

How we use information

• To provide the Service — running your account, showing your comments and saved stories, and keeping you signed in.
• To improve the Service — understanding which stories and features readers use.
• To keep the Service safe — preventing spam, fraud, abuse and attacks, and enforcing our Terms.
• To communicate with you — replying to your messages and, where necessary, telling you about important changes to the Service or these policies.
• To meet legal obligations — where the law requires us to keep or disclose information.

Legal bases

Where data protection law such as the Kenya Data Protection Act 2019, the UK GDPR or the EU GDPR applies, we rely on: performance of a contract (running your account), our legitimate interests (security, analytics and improving the Service, balanced against your rights), legal obligation, and your consent where we ask for it. You may withdraw consent at any time.

Sharing

We never sell or rent your personal information. We share it only with service providers who help us run the Service — hosting, database, authentication and analytics — under contracts that require them to protect it and use it only on our instructions; with authorities when required by law or to protect the safety of any person; and with a successor if Midnight is reorganised or acquired, in which case this policy will continue to apply.

Comments you post publicly are visible to other readers along with your display name.

Advertising

Midnight may show advertising in the future, including through Google Ads. Before any advertising service that uses cookies or similar technologies is switched on, we will update this policy and, where the law requires it, ask for your consent first.

International transfers

Our providers may process information outside your country. Where that happens, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep information

• Account and community data — for as long as your account is open. When you delete your account, we delete or anonymise it within 30 days, except where we must keep it for legal reasons.
• Reading statistics — up to 24 months, then deleted or aggregated.
• Security records — up to 12 months.
• Emails to us — up to 24 months after the matter is resolved.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, write to support@themidnightnews.com from the email address on your account. We respond within 30 days.

You also have the right to complain to a data protection authority, such as the Office of the Data Protection Commissioner in Kenya or the Information Commissioner's Office in the UK.

Security

We use encryption in transit, hashed passwords, access controls and monitoring to protect your information. No system is perfectly secure; if a breach affects you, we will tell you and the relevant authorities as the law requires.

Children

The Service is not directed at children under 13, and you must be at least 13 to create an account. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. For significant changes we will give notice on the Service before they take effect.