Privacy & Data

Privacy Policy

How Inbound Reports handles your information when you use our website and services.

Last Updated: July 29, 2026

Inbound Reports("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our website and services. We operate from Phnom Penh, Cambodia, and align our practices with internationally recognized data protection principles.

1. Information We Collect

We collect only the minimum information necessary to operate the Service:

Account Data (optional).If you register for an account, we collect your email address and a securely hashed password via Supabase, our authentication provider. We do not have access to your plain-text password.

Local Preferences.Your language preference, reading tier, theme choice, and bookmarked stories are stored in your browser's local storage. This data remains on your device and is not transmitted to our servers unless you opt to sync it to your account.

Reading Activity (optional).If you opt into digital literacy tracking, anonymized reading activity — story views, tier switches, and jargon lookups — is stored locally to calculate your literacy score. This data is synced to your account only when you are logged in.

2. Information We Do Not Collect

No IP tracking.IP addresses for tracking or analytics purposes.

No tracking cookies.Tracking cookies, browser fingerprints, or persistent identifiers.

No location data.Location data, contact lists, or device information.

No financial data.Payment details — donations are processed via external payment links (KHQR/ABA), and we do not receive or store any financial information.

3. How We Use Your Information

To provide, maintain, and improve the Service.
To personalize your experience (language, reading tier, theme).
To calculate your Digital Literacy Score (if opted in).
To communicate with you regarding your account or support requests.

We do not sell, rent, or share your personal information with third parties for their own use. We may show labeled third-party advertisements (for example via Google AdSense) to support the Service. Ad partners may use cookies or similar technologies as described in their policies; you can control ads personalization through your browser and Google's ad settings.

4. Third-Party Services

The following third-party providers process data as necessary to operate the Service. Each is contractually bound to use data only for the purposes we specify:

Supabase (USA).Database hosting and user authentication. Stores account credentials and synced preferences. Supabase complies with SOC 2 and GDPR standards. Privacy Policy: supabase.com/privacy

Cloud Hosting.Our website and bot infrastructure are hosted on Railway and Vercel. Temporary server logs may be generated but are not accessed for analytics.

AI Providers (Groq, OpenRouter, Google Gemini).Article text is sent to these providers for AI processing. No personal information, account data, or identifying information is included in these requests — only the public article content and headlines.

5. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at inboundcrew82@gmail.com. Upon deletion, your email, preferences, and reading history will be removed from our database within 14 days. Anonymized, aggregated data that cannot be linked to you may be retained for operational analysis. Local storage data can be cleared at any time via your browser settings.

6. Data Security

We implement reasonable technical and organizational measures to protect your data, including encryption in transit (TLS 1.3) and at rest (AES-256). Passwords are hashed using bcrypt via Supabase Auth. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

Access the personal data we hold about you.
Request correction or deletion of your data.
Withdraw consent for data processing where applicable.
Export your data in a portable format.
Lodge a complaint with applicable data protection authorities.

To exercise these rights, contact us at inboundcrew82@gmail.com. We will respond within 30 days.

8. International Data Transfers

By using the Service, you acknowledge that your data may be processed in Cambodia and in the jurisdictions where our third-party providers operate (including the United States and the European Union). We take steps to ensure that any data transferred receives an adequate level of protection consistent with this policy.

9. Children's Privacy

The Service is not directed at individuals under 13 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly. If you believe a child has submitted data to us, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated via a notice on the website.

11. Contact

For privacy-related inquiries, data requests, or concerns: inboundcrew82@gmail.com

Phnom Penh, Cambodia

Inbound Reports — Tech news aggregation from Phnom Penh, Cambodia.

Loading stories…