Privacy
Privacy notice
Last updated: 9 August 2026
Controller
Endpoint News, private non-commercial project
Contact: office@endpointnews.cc
Public portal use
The portal provides editorial summaries and links to public Microsoft sources. The hosting service may process technical connection data such as IP address, request time, requested route and browser information to deliver and secure the site. The portal does not use advertising, behavioural profiling or third-party analytics.
Local browser data and notifications
Language-independent portal preferences, read items, bookmarks, the first-visit guide state and notification filters are stored locally in the visitor's browser. Browser notifications are used only after explicit permission. These settings can be removed by clearing site data in the browser.
Email and Teams subscriptions
Email subscriptions use explicit consent and double opt-in. Teams subscriptions use explicit consent and a server-side webhook test. The portal stores the email address when provided, selected topics, digest type, consent version, subscription status, timestamps and non-reversible verification token hashes. A Teams webhook URL is encrypted at rest and is never included in email or exposed in the admin dashboard. Resend delivery events such as sent, delivered, delayed, bounced, complained or failed are stored without the full webhook payload. The data is used only to deliver the requested Endpoint News messages. Email messages provide an unsubscribe option.
Purposes and legal bases
Consent under Article 6(1)(a) GDPR is used for email subscriptions and browser notification permission. Article 6(1)(f) GDPR is used for secure delivery, abuse prevention, rate limiting, fault analysis and operation of the public information service.
Recipients
Technical data is processed by the hosting infrastructure required to operate the portal. If email delivery is activated, the verified email provider Resend receives the address and message content required for delivery. If a Teams webhook is configured, Microsoft Power Automate or Teams receives the notification payload sent to the subscriber's own workflow URL. Data is not sold.
Retention
Unconfirmed subscriptions are deleted after 7 days. Unsubscribed records are deleted after 30 days. Delivery logs, source-check history, discovered-link candidates and private backups are retained for no longer than 180 days. Active subscriptions remain stored until withdrawal or unsubscribe. Expired rate-limit records are removed automatically.
Your rights
You may request access, correction, deletion, restriction, data portability or object to processing, and you may withdraw consent at any time. Send requests to office@endpointnews.cc. You may also lodge a complaint with the Austrian Data Protection Authority.