A small footprint.
A clear policy.
You can read NewsLift without an account. An account is needed to vote and report issues.
What we keep
For registered accounts, we store your email address, a one-way password hash, email confirmation status, account creation time, votes, and submitted reports. Session tokens and email confirmation tokens are stored as hashes; email links expire after one hour.
Why we use it
Your email is used for confirmation and password recovery. It is never displayed beside votes. Your vote contributes to public totals. We do not sell personal data or use advertising trackers.
Cookies and service providers
Essential cookies keep you signed in and protect requests against forgery. The site runs on a Hostinger VPS. The configured email delivery provider processes the recipient address and account message to deliver confirmation and recovery emails. Story photos load directly from the named publishers’ image services, which receive your network address when an image loads. We do not send a referring page address. Links to publishers take you to their sites and policies.
Retention and control
Accounts remain until you delete them. Use My account to delete your account, votes, reports, and active sessions. Expired security tokens are removed during scheduled refreshes. Story records are retained for up to 90 days. Operational logs are rotated and backups may retain deleted data for up to 14 days. No marketing emails are sent.
Abuse prevention
Short-lived rate limit counters use keyed hashes of network addresses or account identifiers. The application does not record passwords or email tokens in logs. As with any public service, the hosting provider may process network information for security.