1. Who we are
The Obsidian Media Co. ("The Obsidian", "we", "us") publishes independent global journalism at theobsidian.com. We are the data controller for personal information processed in connection with our website, app, newsletters, and subscriptions.
2. What we collect
We collect (a) information you give us — your name, email, billing address, and account preferences; (b) information we collect automatically — IP address, device and browser metadata, pages viewed, and approximate location; and (c) information from partners — payment confirmations from our processors and authentication data from sign-in providers you choose to use.
3. How we use it
We use your data to deliver our journalism, send newsletters and account communications, process subscriptions, prevent fraud, measure aggregate readership, and comply with legal obligations. We do not sell your personal data, and we do not run third-party behavioural advertising on our site.
4. Legal basis
Where the GDPR applies, we rely on (a) contract performance for subscriptions and account services, (b) legitimate interests for analytics, security, and improving our products, (c) consent for optional cookies and marketing emails, and (d) legal obligation where applicable.
5. Cookies and similar technologies
We use a small number of strictly necessary cookies for sign-in and security, and optional analytics cookies you can decline. We do not use cross-site tracking pixels. See our Cookie Policy for the full list.
6. Sharing
We share data only with vetted processors who help us run the service — hosting, email delivery, payments, and analytics. Each is bound by contract to handle your data lawfully. We may disclose data when required by law or to protect our rights, our readers, or the public.
7. International transfers
We operate bureaux in New York, London, and Singapore. Where data is transferred outside your home region, we use Standard Contractual Clauses or equivalent safeguards.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your data, to object to or restrict processing, and to withdraw consent. To exercise any of these rights, email privacy@theobsidian.com or contact@theobsidian.com.
9. Data retention
We retain account data for as long as your subscription is active and for a reasonable period afterwards to meet legal, tax, and accounting requirements. Newsletter subscribers can unsubscribe at any time, after which we retain only minimal suppression-list data.
10. Children
The Obsidian is not directed at children under 16, and we do not knowingly collect their personal data.
11. Changes to this policy
We update this policy from time to time. Material changes will be flagged on this page and, where appropriate, communicated by email.
12. Contact
Privacy questions: privacy@theobsidian.com. All other enquiries: contact@theobsidian.com.