Groundwork is built on empirical trust. We believe your research and financial inquiries are strictly private. We never sell your personal information, we minimize telemetry, and we provide complete 1-click control over your data across the US (CCPA/CPRA), UK/EU (GDPR), and Australia (Privacy Act 1988). Last updated September 2026.
Our Non-Negotiable Privacy Pledges
Zero Data Sales
We never sell, rent, or trade your data to third-party data brokers or predatory tracking networks.
GPC Signal Honored
We natively recognize and honor the Global Privacy Control (GPC) browser signal automatically.
1-Click Unsubscribe
Every Sunday Dispatch broadsheet email contains an instant, one-click unsubscribe link.
1. Information we collect & why we collect it
We collect only information strictly necessary to provide our research tools and personalized features:
Account & Auth Credentials: When you sign in using Google OAuth or Email Magic Link (via Supabase Auth), we store your verified email address and unique user ID to synchronize your saved articles, reading progress, and calculator presets.
Email Newsletter Subscriptions: When you subscribe to the Sunday Dispatch broadsheet, we store your email address in our secure subscriber database to deliver weekly research digests via Resend.
Web Push Notifications: If you explicitly grant browser permission, OneSignal (v16) generates an anonymous device token to alert you of major breaking research updates. You can revoke this permission in your browser settings at any moment.
Server-Side Telemetry: We use Google Analytics 4 (Data API & Measurement Protocol) to measure aggregated readership trends (e.g. scroll depth $\ge 88\%$, citation verification clicks). We do not log personal identifiable information (PII) or IP addresses.
2. Your rights under GDPR, CCPA/CPRA, and Australian Privacy Principles
Regardless of where you reside, Groundwork grants all readers the following fundamental data rights:
Right to Know & Access: You can request a complete export of all data associated with your account.
Right to Deletion: You can permanently delete your account and all associated saved data at any time.
Right to Non-Discrimination: We never degrade your platform experience or charge fees if you exercise privacy rights.
Right to Opt-Out: You can opt out of all non-essential communications instantly.
3. Infrastructure security & encryption
All data in transit is encrypted using modern TLS 1.3 encryption, enforced by DNSSEC and Cloudflare Edge CDN. All database records are protected by PostgreSQL Row-Level Security (RLS) policies within Supabase, ensuring that authenticated users can only access their own saved data.
4. Third-Party Advertising, Google AdSense & DoubleClick Cookies
Groundwork partners with third-party advertising vendors, including Google AdSense, to support our independent editorial research and maintain open, free access to our interactive decision utilities. In accordance with Google Publisher Policies, we disclose the following operational practices:
Third-Party Vendor Cookies: Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to Groundwork or other websites across the Internet.
DoubleClick Advertising Cookies: Google's use of advertising cookies enables it and its partners to serve relevant ads to our readers based on their navigation history across Groundwork and other digital properties.
Google Consent Mode v2: We implement Google Consent Mode v2 to ensure advertising cookies and telemetry tags respect your explicit consent preferences. No personalized ad targeting cookies are written until consent is granted.
Personalized Ad Opt-Out: Readers can opt out of personalized advertising at any time by visiting Google Ads Settings.
Industry Opt-Out Portals: You can also opt out of third-party behavioral advertising cookies through the Digital Advertising Alliance at www.aboutads.info/choices or for European residents through the EDAA at www.youronlinechoices.eu.
Exercising Your Privacy Rights
To request data deletion, export your records, or inquire about our data protection policies, contact our Data Protection Officer directly: