IXFY is committed to protecting the privacy, confidentiality, and digital security of our readers. We adhere to the foundational principle of data minimization: we collect only the technical information strictly necessary to deliver a secure, fast, and reliable digital journalism experience.

1. Data Minimization & Reader Respect

Unlike conventional media portals that monetize user attention through intrusive behavioral trackers, IXFY operates under a zero-ad-broker philosophy. We do not build commercial behavioral profiles, we do not deploy invasive third-party cross-site cookies, and we never sell, lease, or monetize your personal information to marketing conglomerates or data brokers.

2. Information We Collect

When you access IXFY, we collect the following categories of data:

  • Technical Connection Logs: When your browser loads a page on IXFY, our web servers automatically record standard HTTP request data, including your IP address (which is anonymized and salted), browser user-agent string, operating system type, referring URL, requested resource path, and exact UTC timestamp. These logs are maintained strictly for security monitoring, DDoS mitigation, and system performance diagnostics.
  • Voluntary Reader Information: When you voluntarily subscribe to the Executive Wire newsletter, submit a news tip, or communicate with our editorial bureaus via email, we collect the email address, name, and textual information you choose to provide.

3. Legal Grounds for Processing (GDPR & UK GDPR Compliance)

For users residing within the European Economic Area (EEA) and the United Kingdom, data processing is carried out in strict accordance with Regulation (EU) 2016/679 (General Data Protection Regulation):

  • Article 6(1)(f) (Legitimate Interests): Processing technical connection logs to safeguard system security, prevent malicious brute-force attacks, and maintain web infrastructure integrity.
  • Article 6(1)(a) (Consent): Processing your email address when you voluntarily opt in to receive our intelligence newsletters. You may revoke consent and unsubscribe at any time via the one-click unsubscribe mechanism.

4. Cookies & Local Storage Policy

IXFY uses an intentionally minimal cookie architecture:

  • Strictly Necessary Cookies: We utilize session identifiers and CSRF (Cross-Site Request Forgery) protection tokens to ensure secure browsing sessions.
  • Functional Preferences: We use lightweight browser local storage exclusively to remember user-selected interface preferences (such as Light Mode / Dark Mode toggle).
  • No Third-Party Advertising Beacons: We do not load advertising tracking pixels (such as Meta Pixel or Google Ads remarketing beacons) across our editorial pages.

5. Data Security Architecture

We implement defense-in-depth security standards to protect all transmitted data:

  • Modern Encryption in Transit: All HTTP traffic is secured using TLS 1.3 encryption with strict HTTP Strict Transport Security (HSTS) enforcement.
  • Secure Storage: Subscriber databases are stored in hardened server environments with multi-factor authentication, salted cryptographic password hashing (bcrypt), and automated intrusion detection.

6. Data Retention Schedule

Server connection logs are retained for a rolling period of thirty (30) days solely for operational threat analysis and firewall integrity, after which they are permanently overwritten or purged. Newsletter subscriber details are retained until an unsubscribe request is submitted, at which point the email address is removed from active broadcast lists.

7. Your Privacy Rights (GDPR & CCPA/CPRA Disclosures)

Depending on your geographic jurisdiction, you hold substantial statutory rights over your personal data:

  • Right of Access & Portability: The right to request confirmation of whether we process your data and receive an exported copy of any stored personal information.
  • Right to Rectification & Erasure ("Right to be Forgotten"): The right to request correction of inaccurate data or the immediate deletion of your personal records.
  • California Consumer Privacy Act (CCPA/CPRA): We do not sell personal information, and we have not sold personal information in the preceding 12 months. We do not discriminate against readers exercising their statutory privacy rights.

8. Data Protection Officer (DPO) Contact

If you wish to exercise your data protection rights, submit a privacy inquiry, or register a concern regarding our data governance, please contact our Data Protection Officer directly:

Data Protection Officer: dpo@ixfy.net
General Privacy Inquiries: privacy@ixfy.net
Supervisory Recourse: EEA readers maintain the statutory right to file a formal complaint with their national Data Protection Authority (DPA).