Privacy policy
Last updated: 2026-05-17
Kontrastas stores only the data needed to operate the publication: newsletter subscriptions, petition signatures, comments, reader profile, and (if you donate) a Stripe payment record. We do not sell your data and use privacy-friendly analytics only.
Data controller
Kontrastas editorial team, Vilnius, Lithuania. Contact: kontaktas@infokontrastas.lt.
Data we collect
- Newsletter subscribers: email address, language preference, signup timestamp, confirmation timestamp.
- Petition signatures: full name, email, optional city, hashed IP address for deduplication.
- Reader accounts: email (via Supabase Auth), display name, your comments.
- Donations: amount, Stripe session ID, donor email if shared by Stripe.
- Analytics: aggregate page-view counts via Plausible. No cookies, no IP storage, no cross-site tracking.
Legal basis
GDPR Art. 6(1)(a) — consent (newsletter, comments), (b) — contract (donations), (f) — legitimate interest (fraud prevention, petition integrity).
How long we keep it
- Subscribers — until you unsubscribe.
- Petition signatures — for the lifetime of the petition + 1 year.
- Comments — for the lifetime of your account.
- Donation records — 7 years (accounting requirement).
Third parties
- Supabase (EU-hosted Postgres)
- Stripe (payments)
- Resend / Brevo (transactional + newsletter email)
- Plausible (analytics, cookieless)
- Vercel (hosting)
Your rights
Under GDPR you can access, correct, delete, or export your data, and lodge a complaint with the Lithuanian State Data Protection Inspectorate. Email kontaktas@infokontrastas.lt.