Privacy Policy

This policy covers visitors to coretechmedia.com, CoreTech customers (publishers and advertisers), and readers of publications hosted on CoreTech, to the extent CoreTech processes their data.

For readers of a hosted publication, the publisher decides what to collect (for example, newsletter members) and CoreTech processes that data on the publisher's behalf. See our Data Processing Agreement.

• Account information: name, email, company, password (stored only as a secure hash), and settings you choose.
• Billing and payout information: billing contact, tax details and payout method. Bank and payout details are encrypted. Card payments are handled by our payment processor; we never see or store full card numbers.
• Content you publish: posts, images, members and newsletters in your Ghost site, stored so we can host and back them up.
• Visitor statistics: hosted sites use Umami, a cookieless, open-source analytics tool we run on our own servers. It records pages viewed, referrer, browser, device and country, and counts visitors with a rotating one-way hash; IP addresses are not stored. Our servers also keep standard request logs, used for security and for bot and bandwidth reports.
• Support messages: what you send us through the contact form or dashboard support.

CoreTech uses one essential cookie to keep you signed in to the dashboard and one to remember which site you selected. We don't use advertising or cross-site tracking cookies on coretechmedia.com. Ghost sites may use their own cookies, for example to keep members signed in.

Ads in the CoreTech network are served by our own ad server, which may use a cookie to limit how often the same ad is shown to the same browser.

• To provide, secure and support the Service.
• To calculate publisher earnings and pay them, and to bill advertisers.
• To send service messages, such as downtime alerts, payout notices and changes to these policies.
• To prevent fraud, abuse and invalid ad activity.
• To meet legal, tax and accounting obligations.

We don't sell personal information, and we don't use your publication's reader data for our own marketing.

Where data protection laws such as the GDPR apply, we process data to perform our contract with you, to meet legal obligations, and for our legitimate interests in running a secure, reliable service. Where we rely on consent, you can withdraw it at any time.

We share information only with service providers who help us run CoreTech, under contracts that protect it:

• Email delivery (Mailgun) for newsletters and service emails.
• Payments (Stripe, and PayPal for publishers who choose it) for billing and payouts.
• Network and security (Cloudflare) for DNS and protecting traffic.
• Live chat (Chatwoot) when you message us through the chat bubble.

We may also disclose information when the law requires it, or to protect the rights and safety of our customers, readers or CoreTech.

Connections are encrypted with HTTPS. Passwords are hashed, sensitive details are encrypted at rest, each hosted site has its own database, and access to production systems is limited to the CoreTech team.

We keep account data while your account is open. Backups are kept for the period in your plan. After an account closes, content is deleted after 30 days; billing and payout records are kept as long as tax law requires. Server access logs used for analytics are kept for up to 13 months.

You can see and update most of your information in your dashboard. You may also ask us to give you a copy of your data, correct it, delete it, or restrict how we use it. Readers of a hosted publication should contact the publisher first; we'll help the publisher respond. You also have the right to complain to your local data protection authority.

If we change this policy in a meaningful way we'll tell customers by email or in the dashboard before the change takes effect.

For privacy questions or requests, use our contact form and choose the topic General.