Privacy Policy
On this page (9)
This policy explains what personal data EEST TV Media Private Limited (“EEST TV”, “we”) collects when you use this website, why, how long we keep it, and the rights you have under India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. We are the Data Fiduciary for this data.
1. What we collect and why
| When you… | We collect | Purpose | Basis |
|---|---|---|---|
| Create a reader account | Name, email address, password (stored only in a scrambled one-way form we cannot read), the time you accepted the terms; with Continue with Google, the name, email address and account number Google sends us instead of a password | Letting you sign in, and keeping your saved stories and followed topics on every device where you sign in | Your consent (tick box when you create the account); delete the account at any time in My account |
| Use your account | The numbers of the stories you save and the names of the topics and sections you follow; which browsers are signed in (for example "Chrome on Android") and when they were last used; a 30-day history of sign-ins and account changes; one sign-in cookie | Showing your lists on every device, letting you see and sign out other devices, and protecting the account against misuse | Your consent, and legitimate uses permitted by law for security |
| Post a comment | Name, email address, comment text, time | Moderating and publishing your comment. Your email is never published; we use it only to contact you about the comment. | Your consent (tick box on the form) |
| Use the contact form | Name, email, subject, message | Replying to you and handling your request, tip or complaint | Your consent (tick box on the form) |
| Subscribe to the newsletter | Email address, time of consent and of confirmation | Sending the newsletter you asked for: one email each morning with the day's briefing. We only send it after you confirm by clicking the link we email you (double opt-in). We do not track whether you open it or which links you click. | Your consent; withdraw any time with the unsubscribe link in every email |
| Read any page | Privacy-protected visit statistics (see section 2) | Counting readers, understanding which stories are useful, keeping the site secure and working | Legitimate uses permitted by law; you can switch analytics off |
| Turn on breaking-news alerts | The address your browser's push service gives us for your browser, and the key and secret for encrypting alerts to it; when it was added, last delivered and any delivery failures | Sending you the breaking-news alerts you asked for (at most a few a day). No name, email or IP address is stored with it. | Your consent; withdraw any time with "Turn alerts off" on the Cookie & Storage Policy page or in your browser settings |
| Vote in a homepage poll | Your answer, linked only to a scrambled form of a random code your browser keeps | Counting one vote per reader and showing the results | Legitimate uses permitted by law; no name, email or IP address is stored with the vote |
| Try to sign in to the staff area | IP address, the email typed, time | Blocking password-guessing attacks | Legitimate uses permitted by law |
| Submit any form | A short-lived security token and, if enabled, a Cloudflare Turnstile check | Stopping spam and automated abuse | Legitimate uses permitted by law |
Like every web server, ours keeps standard technical access logs (IP address, time, page requested, browser) to keep the service secure and fix faults. They are deleted after 30 days.
We do not ask for or keep sensitive data such as financial details, government ID numbers or health information. Account passwords are kept only in a scrambled one-way form, so nobody at EEST TV can read them. Please do not include sensitive data in comments or messages.
Reader accounts are separate from our staff accounts. Signing in sets one essential cookie that keeps you signed in for 30 days from your last visit; it holds a random code, and we store only a scrambled form of it. When you sign in on a browser where you had saved stories or followed topics before, they are added to your account. In My account you can change your name, email and password, see and sign out the devices where you are signed in, turn the newsletter on or off, download your data as a file, and delete your account at once: we then delete the account, your saved stories, follows, devices, history and newsletter address; comments that were already published stay, without your name and email. With Continue with Google, Google tells us only your name, email address and Google account number; we never see your Google password, contacts or other data.
Breaking-news alerts are optional and off until you turn them on; we ask in a small bar first, and your browser then asks for permission. You can turn them off on the Cookie & Storage Policy page or in your browser's site settings, and we delete the subscription.
2. Visit statistics
We measure readership with our own analytics, hosted on our servers. No third-party analytics or advertising company receives data about your visit.
- Our analytics never stores your IP address. For counting and abuse protection we store a one-way code derived from it with a secret key that changes every day, so it cannot be turned back into your IP address or used to follow you across days.
- Your browser keeps a random identifier in its own storage so that repeat visits are counted once (details on our Cookie & Storage Policy page). It is not linked to your name or email.
- We record the page, time, referring site, device type, approximate country, scroll depth and reading time.
- Detailed analytics events are deleted after 90 days; only totals (such as views per article per day) are kept after that.
- You can switch analytics off on the Cookie & Storage Policy page, and we respect the browser “Global Privacy Control” signal automatically. A page you open still adds one to that article’s view count, without anything that identifies you.
3. Location and weather
The weather shown in the header uses an approximate city. On our live site this comes from our network provider (Cloudflare), which works out a city from the connection, the same way it routes traffic; we receive only the city and rounded coordinates for that page request and do not store them. If you press “Use my location”, your browser asks your permission first; the coordinates are rounded to about 1 km, used only to fetch the weather, and not stored on our servers. Your chosen city is remembered in your own browser so you are not asked again; you can clear it at any time.
4. Who we share data with
We never sell, rent or trade personal data. We use a small number of service providers (Data Processors) who process data only on our instructions:
- Hosting provider – stores the website and its database.
- Cloudflare – network delivery, security and, where enabled, the Turnstile “I am human” check. See Cloudflare’s privacy policy.
- Email provider – delivers newsletter, confirmation and reply emails.
- Browser push services – if you turn on breaking-news alerts, each alert is delivered through your own browser's push service: Google (Chrome, Edge on Android, Samsung Internet), Mozilla (Firefox), Apple (Safari) or Microsoft (Edge on Windows). The alert is encrypted so that only your browser can read it; the service sees only that a message was sent to that address.
- Open-Meteo – weather data. Our server requests the forecast for a rounded location; your IP address is not sent.
We disclose personal data to authorities only when Indian law requires it, for example under a valid court order or a lawful request under the Information Technology Act, 2000.
5. How long we keep it
| Data | Kept for |
|---|---|
| Published comments | As long as the article is online, or until you ask us to remove your comment |
| Contact-form messages | 2 years, then deleted automatically (longer only if needed for a legal claim or complaint still open) |
| Newsletter sign-ups not confirmed | 30 days |
| Newsletter address after you unsubscribe | 30 days, then deleted |
| Newsletter address your mail server refused (bounced) | 30 days, then deleted |
| Detailed analytics events | 90 days (totals kept without identifiers) |
| Breaking-news alert subscriptions | Until you turn alerts off; deleted at once if your browser's push service says the address has expired, and after 90 days of failed deliveries |
| Reader account, saved stories and follows | Until you delete the account in My account (deletion is immediate) |
| Account sign-in history | 30 days |
| Signed-in browsers | Until you sign out, or 30 days after the browser was last used |
| Sign-in codes and email links | They stop working after minutes or days (as each email says) and are deleted after 8 days |
| Staff sign-in attempts | 30 days |
| Web-server access logs | 30 days |
Deletion runs automatically every day.
6. Your rights
Under the DPDP Act you have the right to:
- Access – a summary of the personal data we hold about you and how it is processed;
- Correction and completion of inaccurate or incomplete data;
- Erasure of data no longer needed, including removal of your comments;
- Withdraw consent at any time, as easily as you gave it (for the newsletter: one click on “unsubscribe”);
- Grievance redressal – a response from us, and if you are not satisfied, a complaint to the Data Protection Board of India;
- Nominate another person to exercise these rights if you die or become incapable of doing so.
If you have a reader account, you can download your data and delete the account yourself, at once, in My account.
To use any of these rights, use our contact form with the subject “Privacy request”. We may ask you to confirm you own the email address concerned. We answer within 30 days.
7. Security and breaches
We protect data with encrypted connections (HTTPS), access controls with two-step verification available to every staff account, least-privilege database accounts, encryption of stored credentials, regular backups and security testing. If a personal-data breach occurs, we will inform the Data Protection Board of India and the people affected, as the DPDP Rules require.
8. Children
EEST TV is a general news service and not directed at children. If you are under 18, please do not comment or subscribe without a parent or guardian’s consent. If we learn we hold a child’s data without verifiable parental consent, we will delete it.
9. Contact and grievances
Data Fiduciary: EEST TV Media Private Limited.
Privacy contact: contact form (subject “Privacy request”). Complaints about our content are handled under our Grievance Redressal process.
We will update this policy when our practices change and show the new date at the top. Material changes will be announced on the site.