← Endpoint News

Privacy

Privacy notice

Last updated: 9 August 2026

Controller

NCOM, private non-commercial project
Contact: office@ncom.at

Public portal use

The portal provides editorial summaries and links to public Microsoft sources. The hosting service may process technical connection data such as IP address, request time, requested route and browser information to deliver and secure the site. The portal does not use advertising, behavioural profiling or third-party analytics.

Local browser data and notifications

Language-independent portal preferences, read items, bookmarks, the first-visit guide state and notification filters are stored locally in the visitor's browser. Browser notifications are used only after explicit permission. These settings can be removed by clearing site data in the browser.

Email subscriptions

Email subscriptions use explicit consent and double opt-in. The portal stores the email address, selected topics, digest type, consent version, subscription status, timestamps and non-reversible verification token hashes. Resend delivery events such as sent, delivered, delayed, bounced, complained or failed are stored without the full webhook payload so delivery problems can be handled. The data is used only to deliver the requested Endpoint News messages. Each message provides an unsubscribe option.

Purposes and legal bases

Consent under Article 6(1)(a) GDPR is used for email subscriptions and browser notification permission. Article 6(1)(f) GDPR is used for secure delivery, abuse prevention, rate limiting, fault analysis and operation of the public information service.

Recipients

Technical data is processed by the hosting infrastructure required to operate the portal. If email delivery is activated, the verified email provider Resend receives the address and message content required for delivery. Data is not sold.

Retention

Unconfirmed subscriptions are deleted after 7 days. Unsubscribed records are deleted after 30 days. Delivery logs, source-check history, discovered-link candidates and private backups are retained for no longer than 180 days. Active subscriptions remain stored until withdrawal or unsubscribe. Expired rate-limit records are removed automatically.

Your rights

You may request access, correction, deletion, restriction, data portability or object to processing, and you may withdraw consent at any time. Send requests to office@ncom.at. You may also lodge a complaint with the Austrian Data Protection Authority.