Privacy Policy

Harbinger Post — harbingerpost.com — Last updated: June 10, 2026

1. Introduction and Identity of the Controller

Welcome to Harbinger Post, a digital news publication operated by Harbinger Bros. LLC, a limited liability company incorporated under the laws of the State of Wyoming, United States, with its principal place of business at 1309 Coffeen Avenue, Sheridan, WY 82801, United States (“we,” “us,” “our,” or “the Company”).

As explained in the Intended Audience section of our Terms and Conditions, Harbinger Post is not specifically directed at, or marketed to, residents of the European Union, the European Economic Area (“EEA”), or the United Kingdom, and we do not consider ourselves subject to the General Data Protection Regulation (EU) 2016/679 (“GDPR”) or the UK General Data Protection Regulation (“UK GDPR”) on a targeting basis. Notwithstanding that position, and consistent with the practice followed by many international publishers, we have chosen to apply a single, globally consistent set of privacy protections — modelled on the GDPR, one of the most comprehensive data protection frameworks in the world — to every visitor of this website, regardless of location. Harbinger Bros. LLC acts as the data controller (or functional equivalent) for personal data processed through this website, and this Policy is drafted accordingly.

We can be reached by email at support@harbingerpressmedia.com. We do not maintain a dedicated Data Protection Officer, as we do not engage in large-scale systematic processing of special categories of personal data and do not consider the GDPR’s DPO-appointment thresholds to be met; however, all data protection inquiries are handled directly by our compliance team at the address above.

2. Scope and Territorial Application

This Privacy Policy, including the rights described in Section 7, applies equally to every visitor and user of harbingerpost.com, wherever located. We do not vary the privacy protections we offer based on a visitor’s location.

As explained in the Intended Audience section of our Terms and Conditions, Harbinger Post’s primary intended audience consists of readers in the United States and an international audience interested in global affairs; the publication is not specifically directed at, or marketed to, residents of any Member State of the European Union, and our coverage of European institutions, countries, and events is provided solely for journalistic and informational purposes. Applying a single global privacy standard to all visitors, as described throughout this Policy, is a voluntary policy choice made for consistency and simplicity — a practice also followed by many international publishers — and should not be read as an acknowledgment that the GDPR, UK GDPR, or similar frameworks apply to us on a targeting basis.

Depending on your location, certain additional legal regimes may separately grant you further, or differently structured, rights alongside the global baseline described in Section 7 — see Section 8 (California), Section 9 (Canada), and Section 13 (other jurisdictions). These operate in addition to, not instead of, the rights described in Section 7.

3. What Personal Data We Collect

We collect and process only the minimum personal data necessary to operate our publication. We do not require user registration, maintain user accounts, run advertising networks, or deploy behavioural profiling technologies. We do use two cookie-less, anonymous analytics tools to measure aggregate visitor numbers — see “Anonymous Web Analytics” below.

Anonymous Web Analytics

To measure aggregate visitor numbers, we use Vercel Web Analytics, a service provided by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). This tool collects only aggregated, non-personal metrics such as page views, referrers, and approximate country-level location. It does not set cookies, does not permanently store IP addresses, and does not re-identify or track visitors across sessions or websites. The legal basis for this processing is our legitimate interest in understanding how our website is used (Art. 6(1)(f) GDPR). No consent is required for this processing, as no information is stored on or read from your device within the meaning of § 25 TDDDG / Art. 5(3) ePrivacy Directive. Further information: Vercel Web Analytics privacy documentation.

We additionally use Cloudflare Web Analytics, a cookie-less, anonymous analytics service provided by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). Like the tool above, it collects only aggregated, non-personal metrics (e.g. page views, referrers, approximate country-level location) using your browser’s Performance API, sets no cookies, and does not store a persistent identifier or re-identify visitors across sessions or websites. The legal basis for this processing is our legitimate interest in understanding how our website is used (Art. 6(1)(f) GDPR); no consent is required for this processing, as no information is stored on or read from your device within the meaning of § 25 TDDDG / Art. 5(3) ePrivacy Directive. Further information: Cloudflare's privacy policy.

3.1 Data Collected Automatically by Our Infrastructure

When you access harbingerpost.com, certain technical data is automatically processed by our infrastructure providers as part of the delivery of our web service. This includes:

• IP address: Your Internet Protocol (IP) address is processed by Vercel Inc. (“Vercel”), our hosting provider, for the purpose of routing network requests, detecting abuse, and maintaining service security. Vercel may retain server access logs for a limited period in accordance with its own data retention policies.
• HTTP request metadata: This includes your browser type and version (User-Agent string), referring URL, requested URL path, timestamp of the request, and HTTP response codes.
• TLS/SSL connection data: Technical data required to establish a secure encrypted connection to our servers.

We do not independently store these server logs beyond the retention periods set by Vercel's standard infrastructure logging. We do not use IP addresses to identify individual users or to build profiles.

3.2 Data You Voluntarily Provide

Harbinger Post offers a contact form at /contact. If you use it, we collect and store your name, email address, and message content in our application database in order to respond to your inquiry. This data is stored via our database provider, Supabase Inc. (see Section 12 below), and is accessible only to authorised personnel who handle correspondence. Legal basis: Art. 6(1)(b) GDPR (necessary to respond to your request) or, where no contractual relationship is established, Art. 6(1)(f) GDPR (legitimate interest in handling incoming communications). We retain contact form submissions for as long as necessary to address your inquiry and for a reasonable period thereafter for documentation purposes, typically no longer than 12 months, unless a longer retention period is required by law. You may request earlier deletion of your message at any time by contacting us. We do not offer comment sections or newsletter subscriptions.

3.3 Data Stored in Your Browser (localStorage)

We store one (1) item in your browser's localStorage:

This localStorage entry is technically necessary for the operation of our consent management system. It does not contain any unique identifier, does not transmit data to any server, and is not used for tracking or advertising purposes. Under §25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and the equivalent provisions of the ePrivacy Directive (2002/58/EC as amended), the storage of this item does not require separate consent as it is strictly necessary to provide the service explicitly requested by the user.

4. Legal Bases for Processing

As part of the global approach to privacy described in Section 1 and Section 2, we apply the following legal bases, modelled on Article 6 GDPR, as a matter of policy to all processing of personal data through this website, regardless of the location of the individual concerned:

• Article 6(1)(f) GDPR — Legitimate Interests: The automatic processing of your IP address and HTTP request metadata by our hosting infrastructure is necessary for our legitimate interests in maintaining a secure, functional, and reliable website, and in detecting and preventing abuse. We have conducted a legitimate interests assessment and determined that this processing does not override your fundamental rights and freedoms, given the limited nature of the data processed and the absence of profiling or tracking.
• Article 6(1)(c) GDPR — Legal Obligation: We may process personal data where necessary to comply with applicable legal obligations, including responding to lawfully issued court orders or regulatory demands.
• Article 6(1)(a) GDPR — Consent: Where we ask for your consent (for example, in relation to optional features not yet deployed), processing will only occur upon your freely given, specific, informed, and unambiguous consent. You may withdraw any consent given at any time without detriment.

5. International Data Transfers

As a US-based company using US and international cloud infrastructure, some processing of personal data occurs outside your home jurisdiction. We take the following measures to ensure adequate protection:

5.1 Transfers to the United States

Our primary hosting provider, Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA), processes server-side request data in the United States. Vercel participates in the EU-US Data Privacy Framework as established by Commission Implementing Decision (EU) 2023/1795 of 10 July 2023, which provides an adequacy decision for transfers to certified US organisations. To the extent that any personal data of EEA residents is transferred to Vercel, such transfer is covered by this adequacy decision.

In addition, we rely on Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR as a supplementary transfer mechanism, incorporating the standard data protection clauses adopted by the European Commission in its Implementing Decision (EU) 2021/914 of 4 June 2021.

5.2 Transfers to Singapore

Our database provider, Supabase Inc. (970 Toa Payoh North #07-04, Singapore 318992), may process certain database-level metadata in Singapore. Singapore is not currently the subject of a European Commission adequacy decision for GDPR purposes. Accordingly, any transfer of personal data of EEA residents to Supabase is governed by Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR. We have entered into a data processing agreement with Supabase that incorporates the applicable SCCs and imposes equivalent obligations.

5.3 Transfer Impact Assessments

We have carried out transfer impact assessments in respect of both Vercel and Supabase. These assessments considered the legal frameworks applicable in the United States and Singapore respectively, including applicable surveillance laws, and concluded that, given the nature of the data processed (predominantly technical request metadata, with no personal content submitted by users), the risk to individuals is low and the protections afforded by the applicable transfer mechanisms are sufficient.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law:

• Server access logs (Vercel): Retained for up to 30 days as part of Vercel's standard infrastructure logging, after which they are automatically deleted by Vercel's systems.
• Browser localStorage data: The hpm_cookie_consent item persists in your browser until you clear your browser storage or withdraw consent. We have no control over and no access to this data once stored on your device.

7. Your Privacy Rights

As part of our global approach to privacy (see Section 1), we extend the following rights, modelled on the GDPR / UK GDPR, to every visitor of this website, regardless of location:

• Right of access (Art. 15 GDPR): You have the right to obtain confirmation as to whether we process personal data concerning you, and if so, to receive a copy of that data and information about how it is processed.
• Right to rectification (Art. 16 GDPR): You have the right to have inaccurate personal data concerning you corrected without undue delay.
• Right to erasure / “right to be forgotten” (Art. 17 GDPR): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while a challenge to its accuracy is resolved.
• Right to data portability (Art. 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to object (Art. 21 GDPR): You have the right to object at any time to processing of your personal data where we rely on legitimate interests as our legal basis. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right not to be subject to automated decision-making (Art. 22 GDPR): We do not engage in any automated decision-making or profiling that produces legal effects or similarly significantly affects you.
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Raising concerns with a data protection authority: If you are located in the EU/EEA or United Kingdom, you may contact the supervisory authority in your Member State of habitual residence, place of work, or place of the alleged infringement. In Germany, the lead supervisory authority is the Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit, BfDI). In France: CNIL. In the United Kingdom: the Information Commissioner's Office (ICO). In Italy: Garante per la protezione dei dati personali. In Spain: Agencia Española de Protección de Datos (AEPD). If you are located elsewhere, we encourage you to raise any concern directly with us first, using the contact details below; we handle all such requests under the same standards described in this Section, regardless of where you are located.

To exercise any of these rights, please contact us at support@harbingerpressmedia.com. We aim to respond within one month of receipt of your request, and may take up to a further two months where the request is complex or numerous.

8. Your Rights Under the CCPA/CPRA (California Residents)

If you are a California resident, the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (“CCPA/CPRA”) grants you the following rights:

• Right to know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collection, and the categories of third parties with whom it is shared.
• Right to delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to opt-out of sale or sharing: We do not sell your personal information to third parties. We do not share personal information for cross-context behavioural advertising. Accordingly, there is no opt-out mechanism required for this purpose.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
• Right to limit use of sensitive personal information: We do not collect sensitive personal information as defined under the CPRA.

To submit a CCPA/CPRA request, please email support@harbingerpressmedia.com with the subject line “California Privacy Request.” We will respond within 45 days, with a possible extension of an additional 45 days where reasonably necessary.

Categories of personal information collected in the preceding 12 months: Internet or other electronic network activity information (server log data including IP addresses and browser identifiers). We have not sold or shared any personal information.

9. Your Rights Under PIPEDA (Canadian Visitors)

Visitors from Canada have rights under the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and applicable provincial legislation. You have the right to access your personal information held by us and to challenge its accuracy. To exercise these rights, please contact us at support@harbingerpressmedia.com.

10. Children's Privacy

Harbinger Post is a general-interest news publication and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete the data.

11. Security Measures

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include TLS/SSL encryption for all data in transit, access controls on our database infrastructure, and the contractual security obligations imposed on our processors, Vercel and Supabase.

12. Third-Party Services and External Connections

Harbinger Post operates without advertising revenue. We do not deploy advertising networks, retargeting pixels, or behavioural profiling technologies. The following third-party services are involved in the operation of this website:

Infrastructure Providers

• Vercel Inc. (650 California Street, San Francisco, CA 94108, USA) — website hosting and content delivery. Vercel processes server log data including IP addresses solely for the purpose of delivering web pages to your browser. Vercel’s privacy policy: vercel.com/legal/privacy-policy
• Supabase Inc. (970 Toa Payoh North, Singapore 318992) — database hosting. Supabase stores article content and site configuration data. No visitor personal data is stored in our database beyond what is described in this policy. Supabase’s privacy policy: supabase.com/privacy

Image Delivery

Article images may be hosted on and served directly from Unsplash (Unsplash Inc., Montreal, QC, Canada). When your browser loads an image from Unsplash servers, Unsplash may receive your IP address and standard browser request headers as part of the HTTP connection. We have no control over Unsplash’s data processing. Unsplash’s privacy policy: unsplash.com/privacy

Article images may also be hosted on and served directly from Wikimedia Commons (Wikimedia Foundation, Inc., 1 Montgomery Street, Suite 1600, San Francisco, CA 94104, USA). When your browser loads an image from Wikimedia Commons servers, the Wikimedia Foundation may receive your IP address and standard browser request headers as part of the HTTP connection. We have no control over the Wikimedia Foundation’s data processing. Wikimedia Foundation’s privacy policy: foundation.wikimedia.org/wiki/Policy:Privacy_policy

Email Correspondence

If you contact us by email at support@harbingerpressmedia.com, your message and any attachments are received, stored, and managed through GoDaddy Workspace Email (GoDaddy.com, LLC, 100 S. Mill Ave, Suite 1600, Tempe, AZ 85281, USA), our email hosting provider. GoDaddy processes this correspondence as our data processor, acting on our instructions; we have no control over its underlying infrastructure. GoDaddy's privacy policy: godaddy.com/legal/agreements/privacy-policy

Google Search Console

We use Google Search Console (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to monitor how harbingerpost.com appears in Google Search results and to identify and resolve indexing issues. Google Search Console provides us with aggregated, anonymised data about search queries and page performance; we do not receive personal data about individual visitors through this tool. Google’s privacy policy: policies.google.com/privacy

Social Media

We maintain social media presences on Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland), X / Twitter (X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA), and Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). The social media icons in our footer are simple hyperlinks — no social media plugins, share buttons, tracking pixels, or “Like” buttons are embedded on this website. Your browser makes no connection to any social media platform unless you actively click one of these links. When you click a link and are redirected to the platform, the platform’s own privacy policy governs all subsequent data processing.

13. Additional Jurisdictions (Australia, India, South Korea, Brazil, South Africa)

Australia

If you are located in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply to our processing of your personal information. You have the right to access and seek correction of your personal information, and to lodge a complaint about a potential breach of the APPs. Complaints may be directed to us at support@harbingerpressmedia.com and, if unresolved, to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

India

If you are located in India, the Digital Personal Data Protection Act, 2023 (“DPDP Act”) applies to our processing of your personal data. As a Data Principal, you have the right to obtain a summary of the personal data we process about you, the right to correction and erasure of your personal data, and the right to grievance redressal. To exercise these rights or raise a grievance, contact support@harbingerpressmedia.com. Unresolved grievances may be escalated to the Data Protection Board of India.

South Korea

If you are located in South Korea, the Personal Information Protection Act (“PIPA”) applies to our processing of your personal information. You have the right to access, correct, delete, and suspend the processing of your personal information. To exercise these rights, contact support@harbingerpressmedia.com. Complaints may also be directed to the Personal Information Protection Commission (PIPC) of the Republic of Korea.

Brazil

If you are located in Brazil, the Lei Geral de Proteção de Dados Pessoais (“LGPD”, Law No. 13,709/2018) applies to our processing of your personal data. You have the right to confirmation of the existence of processing, access, correction, anonymisation, portability, and deletion of your personal data, and to information about the public and private entities with which we have shared it. To exercise these rights, contact support@harbingerpressmedia.com. Complaints may also be directed to the Autoridade Nacional de Proteção de Dados (ANPD).

South Africa

If you are located in South Africa, the Protection of Personal Information Act 4 of 2013 (“POPIA”) applies to our processing of your personal information. You have the right to access, correct, and request deletion of your personal information, and to object to its processing. To exercise these rights, contact support@harbingerpressmedia.com. Complaints may also be directed to the Information Regulator of South Africa.

14. Notification of Personal Data Breaches

As part of our global approach to privacy, we apply breach-notification practices modelled on Articles 33–34 GDPR to any personal data breach, regardless of the location of the individuals affected: in the event of a personal data breach likely to result in a risk to your rights and freedoms, we aim to notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, describing the nature of the breach and the measures taken or proposed.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. We will indicate the date of the most recent revision at the top of this page. For material changes, we will take reasonable steps to notify users, such as posting a prominent notice on the website. Your continued use of harbingerpost.com following the posting of changes constitutes your acceptance of those changes to the extent permitted by applicable law.

16. Contact

For all privacy-related inquiries, requests to exercise data subject rights, or complaints, please contact:
Harbinger Bros. LLC
1309 Coffeen Avenue, Sheridan, WY 82801, United States
Email: support@harbingerpressmedia.com