Your privacy

The Hacker News in Darija (thehackernewsbdarija.com) is an independent Moroccan media project covering cybersecurity news, using AI to translate articles into Moroccan Darija and generate manga illustrations. The project is operated from Morocco and is subject to Law No. 09-08 on the protection of personal data.

This document explains what we collect, why, and who we share it with. If you have any question, write to legal@thehackernewsbdarija.com.

• ▶Newsletter email: when you subscribe to the weekly newsletter, we keep only your email, the signup timestamp, and the subscription status (active / pending / unsubscribed).
• ▶Account data: when you sign in via Google, GitHub, LinkedIn, or magic link, we store the email and display name returned by the provider, plus a session token. We never see or store a password.
• ▶Comments and saves: when you comment on or save an article, that interaction is linked to your account.
• ▶Server logs: IP, user-agent, and visited paths — kept briefly for security and debugging.
• ▶Analytics (Plausible): when enabled, anonymous, cookie-less aggregate stats — no full IP, no fingerprinting.

We only use strictly-necessary cookies:

• ▶Auth.js cookies: required to keep your session active after sign-in.
• ▶CSRF cookies: required to protect sign-in and subscription forms.
• ▶Theme preference: stored in localStorage (not a cookie) so we remember whether you picked dark or light mode.

We do not use advertising trackers or third-party analytics cookies, which is why we do not show a consent banner.

We share limited data with these processors, each with a specific role:

• ▶Resend — sends newsletter emails and magic-link sign-in messages. Receives your email and message body.
• ▶Google / GitHub / LinkedIn (OAuth): if you choose one of them to sign in, the provider returns your email and public name; we never receive your password.
• ▶Plausible Analytics (when enabled): cookieless EU-self-hosted aggregate analytics.
• ▶Sentry (when enabled): server-side and browser-side error tracking so we can fix bugs quickly.
• ▶Browserless — used server-side to fetch source articles from thehackernews.com. It does not handle your data.
• ▶Unipile / Youcodee — used to publish our own articles to our LinkedIn page. They do not handle user data.

Each processor has its own privacy policy — we choose them based on their data protection track record.

• ▶Newsletter email: until you unsubscribe — then deleted within 30 days.
• ▶Account and comments: until you request deletion; your activity (comments, saves) is retained while your account is active.
• ▶Server logs: 30 days maximum, then automatically purged.

Under Moroccan Law 09-08 on personal data protection, you have the following rights:

• ▶Right of access: request a copy of the data we hold about you.
• ▶Right of rectification: ask us to correct inaccurate data.
• ▶Right of erasure: request deletion of your account and associated data.
• ▶Right to object: refuse a specific processing activity.
• ▶Right to portability: receive your data in a machine-readable format.

To exercise any of these rights, write to legal@thehackernewsbdarija.com. We respond within 30 days. You also have the right to lodge a complaint with the CNDP (cndp.ma) if our response does not satisfy you.

The site is targeted at adults and tech / cybersecurity professionals. We do not knowingly collect data from children under 16. If you become aware of an account belonging to a child, please let us know so we can delete it.

We may update this policy as we add services or as the law changes. For material changes, we notify users by email or via a banner on the site. The last-updated date is shown at the top. Continued use of the site after an update means you accept the new version.

Any privacy-related question or request: