Privacy Policy
1. Who We Are
IsThisFakeNews.org ("Site", "Service", "we", "our", "us") is owned and operated by Philipp Pattera, who acts as the sole Data Controller for any personal data processed through this website, associated blog, and related services.
Contact:
Email: hello@forlomi.com
Postal address: AT3304 Sankt Georgen am Ybbsfelde, Flurstrasse 2/3
2. Scope of This Policy
This Privacy Policy explains how we collect, use, share, and safeguard the information you provide when you:
- visit or interact with IsThisFakeNews.org or its sub-domains;
- use our automated fake-news risk-scoring tool ("Index");
- create an account or log in;
- subscribe to a paid tier or conduct any payment through our provider, Stripe;
- interact with us via email, social media, or customer-support channels.
3. Information We Collect
| Category | Data Types | Primary Source | Legal Basis (GDPR) |
|---|---|---|---|
| Account Data | Name, email address, hashed password, plan type | You | Art. 6 (1)(b) – contract |
| Query Data | Text you submit for fact-checking, result score, request timestamps | You | Art. 6 (1)(b) – contract |
| Payment Data | Last four digits of card, payment tokens, billing address, subscription status | Stripe | Art. 6 (1)(b) – contract |
| Usage Data | IP address, browser type, device ID, pages visited, request counts, cookies | Automated | Art. 6 (1)(f) – legitimate interests |
| Communications | Emails, support chats, social-media messages | You | Art. 6 (1)(a)/(f) – consent / legitimate interests |
We do not knowingly collect data from children under 16. If you believe this has occurred, please contact us immediately.
4. Why We Use Your Data
- Provide & improve the Service – operate the Index, enforce the 3-free-queries limit, deliver results, debug & enhance features.
- Account & Subscription Management – authenticate log-ins, track usage quotas, process upgrades/downgrades, issue invoices.
- Payments – facilitate secure card transactions, recurring billing, and refunds via Stripe.
- Compliance & Security – detect fraud or abuse; comply with EU GDPR, Austrian data-protection law, U.S. financial regulations, and Stripe’s "Know Your Customer" obligations.
- Communication – send confirmations, service updates, marketing you’ve opted-in to, or respond to support questions.
- Analytics – understand traffic patterns using privacy-friendly analytics (currently Google Analytics).
5. How We Share Your Data
- Stripe – payment processing, PCI-DSS security, fraud prevention. Stripe acts as an independent Data Controller for payment data.
- Supabase – user account and query storage (hosting region: United States).
- Service Providers – carefully selected hosting, email, and analytics partners who sign data-processing agreements.
- Legal & Compliance – regulators, law-enforcement, or courts when required by law.
- Business Transfers – in the event of a merger or acquisition under equivalent safeguards.
We never sell or rent your personal information.
6. International Transfers
Our primary servers are located in the United States. Where data is transferred outside the EEA, we rely on EU-approved SCCs, adequacy decisions, or your explicit consent.
7. Retention
| Data Category | Retention Period |
|---|---|
| Account & billing records | 7 years after last transaction |
| Query & usage logs | 24 months (aggregated thereafter) |
| Deleted accounts | Erased within 30 days (except billing records) |
| Marketing opt-out lists | Indefinitely (to honor opt-out) |
8. Security
We apply industry-standard encryption (HTTPS/TLS), role-based access controls, server firewalls, and regular penetration testing. No method is 100% secure; you use the Service at your own risk.
9. Your Rights
You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability. You may also withdraw consent at any time for future processing. EU residents may lodge complaints with their local data-protection authority (e.g., Austrian DSB). California residents have additional CCPA rights.
Send requests to hello@forlomi.com. We aim to respond within 30 days.
10. Cookies & Tracking
We use only essential cookies (session login, subscription status) and anonymised analytics cookies. You may block cookies via your browser; some features may break. See our separate Cookie Notice.
11. Third-Party Links
The Site may link to external news sources or social platforms. We are not responsible for their privacy practices. Always review the policies of any site you visit.
12. Changes to This Policy
We may update this Privacy Policy to reflect legal or operational changes. We will post the new version here and, if changes are material, notify registered users via email at least 14 days before they take effect.
13. Contact
For privacy questions, data-subject requests, or complaints, contact:
Philipp Pattera
Email: hello@forlomi.com
Address: AT3304 Sankt Georgen am Ybbsfelde, Flurstrasse 2/3
Thank you for trusting IsThisFakeNews.org. We are committed to protecting your privacy while helping you navigate today’s complex information landscape.