How we handle your data.

1. Who we are

The Service at jurowl.com is operated by Jurowl ("we", "us"). For data-protection purposes we act as the data controller for personal information we collect through the Service.

2. What we collect

We collect three broad categories of information:

• Account information. If you sign in, we store an identifier from your authentication provider (Telegram user ID), your public display name and avatar URL, the date your account was created, and your sign-in history.
• Submission information. If you submit a channel, we store the username you submitted, any optional metadata you provided, and an audit record linking the submission to your account.
• Usage information. Our servers receive ordinary HTTP request data (timestamp, IP address, user agent, path requested, response status). We keep recent request logs for up to thirty days for security and rate-limiting purposes.

We do not collect special-category personal data (race, religion, health, etc.) and do not knowingly accept submissions of such data.

3. Cookies and similar technologies

We use a small number of cookies and similar technologies, each with a clear purpose:

• Strictly necessary. A session cookie that keeps you signed in after authentication. Without this cookie the sign-in flow cannot work.
• Preferences. Local storage entries for non-sensitive UI preferences (e.g. recently viewed channels, sort order).
• Analytics. Aggregate page-view counts so we can understand which pages are useful. We do not build cross-site profiles.
• Advertising (where applicable). When advertising is served by Google AdSense or a similar network, the network may set its own cookies under its privacy policy. Ad personalisation can be controlled at Google Ad Settings.

4. Why we process your data

We process personal information for the following purposes:

• to provide and maintain the Service (contractual necessity);
• to authenticate sign-in and protect accounts (legitimate interest in security);
• to detect and prevent abuse, fraud, and spam (legitimate interest);
• to measure how the Service is used in aggregate (legitimate interest);
• to display advertising where applicable (legitimate interest, with the right to object);
• to comply with legal obligations.

5. Third-party services

We share information with the following categories of processor:

• Hosting and infrastructure. Server providers that host the Service. They process data on our behalf under standard data-processing terms.
• Authentication. Telegram, when you sign in via Telegram. They process your authentication request under their own privacy policy.
• Advertising network. Google LLC, when AdSense is enabled. Google uses cookies and similar technologies to serve and measure ads, governed by the Google advertising policies.
• Email. An email-sending provider for transactional messages (sign-in receipts, abuse responses). Marketing email is opt-in only.

We do not sell personal information. We do not transfer your data to any party for cross-context behavioural advertising in the sense of the California Consumer Privacy Act.

6. International transfers

Some of our processors operate outside the European Economic Area or the United Kingdom. When data is transferred outside those jurisdictions, we rely on Standard Contractual Clauses or equivalent safeguards approved by the relevant authorities.

7. Retention

Account information is kept for as long as your account exists. Server logs are kept for up to thirty days. Aggregated analytics that no longer identify an individual may be kept indefinitely. If you delete your account, your identifiable information is removed within thirty days; backups containing that information are overwritten on our normal rotation.

8. Your rights

Depending on where you live you may have the right to:

• access the personal information we hold about you;
• correct inaccurate information;
• delete information we no longer need to hold;
• object to processing based on legitimate interest, including for advertising;
• port your data to another provider in a machine-readable format;
• withdraw consent for processing that depends on consent;
• lodge a complaint with your local data-protection authority.

To exercise any of these rights, write to [email protected] from the address associated with your account. We respond within thirty days.

9. Children

The Service is not directed at children under 13. If you become aware that a child has provided personal information without parental consent, please contact us and we will delete it.

10. Changes

When we change this policy materially we will update the date at the top of the page. Continued use of the Service after a change indicates that you have read and understood the updated policy.

11. Contact

Privacy requests, data-protection enquiries, and complaints: [email protected].