1. Who we are
The Obsidian is an independent digital publication based in the United Kingdom, covering global affairs, politics, business, technology, culture, and the stories beneath the surface. We are the data controller for personal information processed in connection with our website and newsletters.
2. What we collect
We collect (a) information you give us — your name, email address, and account or newsletter preferences; (b) information we collect automatically — IP address, device and browser metadata, pages viewed, and approximate location; and (c) authentication data from sign-in providers you choose to use.
3. How we use it
We use your data to deliver our journalism, send newsletters and account communications, prevent fraud, measure aggregate readership, and comply with legal obligations. We do not sell your personal data, and we do not run third-party behavioural advertising on our site.
4. Legal basis
Where the GDPR applies, we rely on (a) contract performance for subscriptions and account services, (b) legitimate interests for analytics, security, and improving our products, (c) consent for optional cookies and marketing emails, and (d) legal obligation where applicable.
5. Cookies and similar technologies
We use a small number of strictly necessary cookies for sign-in and security, and optional analytics cookies you can decline. We do not use cross-site tracking pixels. See our Cookie Policy for the full list.
6. Sharing
We share data only with vetted processors who help us run the service — hosting, email delivery, authentication, and analytics. Each is bound by contract to handle your data lawfully. We may disclose data when required by law or to protect our rights, our readers, or the public.
7. International transfers
The Obsidian is based in the United Kingdom. Where data is transferred outside your home region, we use Standard Contractual Clauses or equivalent safeguards.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your data, to object to or restrict processing, and to withdraw consent. To exercise any of these rights, email contact@theobsidian.media.
9. Data retention
We retain account and newsletter data only for as long as needed to provide the service, meet legal obligations, and keep necessary suppression-list records after an unsubscribe request.
10. Children
The Obsidian is not directed at children under 16, and we do not knowingly collect their personal data.
11. Changes to this policy
We update this policy from time to time. Material changes will be flagged on this page and, where appropriate, communicated by email.
12. Contact
Privacy, editorial, press, partnership, correction, and general questions: contact@theobsidian.media. Technical, account, and newsletter support: support@theobsidian.media.