Privacy notice

• Lonely Hearts. Your advert, your name and your email. We use them to read your advert, publish it as you wrote it (trimmed only if it is too long), tell you your reference number when it runs, and pass on replies. You must be 18 or over. Your name and email are never published.
• Classifieds. Your ad, its category and your email, to publish the ad, give you a Box No. and pass on replies.
• Letters. Your letter and the sign-off you choose, which we publish as you wrote it. We do not need an email address.
• Heard in Haddenham, Ask Philippe and story tips. What you write, and your name if you choose to give one. For story tips, your email if you choose to give it, used only to check with you about what you sent and never published. We never publish a name without asking. For Ask Philippe we take names out before anything runs.
• Cheltenham Challenge answers. Your answer, the time it arrived (so the first correct one can be shown to be first), the name you want a mention under if you win, and your email if you give it, used only to tell you that you won.
• Replying to an advert. Your message, your email and, if you tick it, permission to quote your message in the paper without your name.
• Events for What's On. The event's name, day, times, place, a few lines about it, who is running it, any link and any picture, which we publish on What's On with a page of their own once the editor has checked them; and your email, used only so the editor can check a detail with you, never published. Events are read by the editor, not checked by the AI service.
• Photos (story tips and events only). Any photo you attach. It is resized in your browser before it is sent, and any location or camera details hidden in the file are removed before we store it.
• Golden Wellie nominations. When you nominate a piece, we keep a scrambled version of your internet address with it, so each person nominates a piece only once. It cannot be turned back into your address, we never show how many nominations anything has, and it is deleted at the end of the month after the one it counts for.
• Advertising enquiries. Your name, email and message, emailed to the editor, who replies about advertising. They are not kept on the website, and they are not checked by the AI service.
• Comments. Your comment and the name you choose (or none), which are published under the story. We keep a scrambled version of your internet address with a comment for 30 days in case it needs dealing with as abuse, then remove it. We do not ask for an email address.
• Thumbs up and down. A scrambled version of your internet address with each vote, so each person votes once. After 60 days it is replaced, so the count stays and nothing links the vote to you.
• Donations, memberships and advert bookings. Payments are taken by Stripe, which handles your card: we never see it. We keep the amount, the option you chose, any name you asked to be credited with, and the name and email Stripe passes us when a payment completes, as the record of money received. We keep those for 7 years for tax records, then delete the name and email. A checkout you start but do not pay is deleted after 30 days and holds no details about you.
• The weekly email. Your email address, and which page you were on when you asked for it. We use the address to send you the week's stories once a week and for nothing else. Nothing is sent until you have confirmed the address from your own inbox. Every edition carries a link that stops it, and stopping deletes your address.
• Stopping abuse. A scrambled version of your internet address, so one person cannot send us hundreds of forms. It cannot be turned back into your address and is deleted after 2 days.

• The editor, who reads everything before it is used.
• Cloudflare hosts the site and the database and delivers our email. Our email goes out only from a dedicated address (mail.haddenham.news). Cloudflare also runs a spam check on our forms (Turnstile) that looks at your browser and connection, not at what you write.
• Stripe takes donations and keeps its own records of the payment, under its privacy policy (opens in a new tab).
• Resend sends the weekly email, so it holds the addresses that email goes to, under its privacy policy (opens in a new tab). It is given nothing else about you.
• A US-based AI service: everything you write is sent to an AI service based in the United States to check it for anything defamatory, abusive or harmful before an editor reads it, and, for Ask Philippe only, to write Philippe's answer. Your name and email are not sent. A person always makes the decision to publish.

• A submission nobody has dealt with: 90 days. One we turn down: 7 days.
• A submission we accept but have not yet run: 60 days.
• The email sent with an event for What's On: 30 days after the event. An event we turn down: 7 days, all of it. A published listing goes from What's On the day after the event.
• Your name, email and original text once your advert has run: 365 days from the day it went live, so replies can still reach you. What we published stays published.
• A reply conversation: 60 days after its last message.
• Records of the emails we sent, without their contents: 90 days.
• The scrambled address with a comment: 30 days. With a vote: 60 days. A comment itself stays published unless it is removed.
• A donor's name and email: 7 years. An unpaid checkout: 30 days.
• An address given for the weekly email and never confirmed: 7 days. A confirmed one: until you stop the email.
• Anonymous page counts, which hold nothing that identifies anyone: 400 days.