Privacy policy

Short version: this site has no accounts, no ads and no tracking cookies, and we don’t sell or share anyone’s information.

This website

undercurrentdaily.com is hosted by Cloudflare, which processes standard request data (such as IP address and browser type) to deliver the site and protect it from abuse. We don’t use analytics or advertising cookies, and we don’t build profiles of visitors.

Site statistics

To see which pages people read, we use Cloudflare Web Analytics. It’s cookieless: it sets no cookies, doesn’t use local storage or fingerprinting, and doesn’t collect personal data. We only see aggregate counts, such as page views and visits per page, the site that referred a visit, the country, and the device type. See Cloudflare’s privacy policy.

We also look at aggregate search data from Google Search Console and Bing Webmaster Tools: which searches show our pages and how often people click through. Those reports are totals and never identify anyone.

Videos

Case pages and reported-number pages show our YouTube videos. Nothing loads from YouTube until the video scrolls into view; then YouTube’s player loads from youtube-nocookie.com. The video never starts by itself: you press play, and Google’s privacy policy applies.

We count anonymous clicks on our videos and on links to YouTube and our newsletter, and how often the number lookup is used, without cookies. Each count is only a daily total per type of page; it holds no IP address, no identifier and never the phone number you searched.

Newsletter and podcast

Our newsletter and podcast are published on Substack. If you subscribe, Substack handles your email address under Substack’s privacy policy. The signup form on our newsletter page is Substack’s.

Email

If you email us (tips, corrections or anything else), we use your message and address to reply and to report. We treat tips with care, and we don’t share your contact details without your permission unless the law requires it.

Undercurrent Studio and Google APIs

Undercurrent Studio is our internal publishing tool. It uses Google and YouTube APIs, with our own authorization, only to manage Undercurrent’s own YouTube channel and website: uploading and scheduling our videos, updating their details, reading our channel’s analytics, and reading this website’s own Google Search Console reports. It doesn’t access, collect or store anyone else’s Google data.

Undercurrent Studio’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. It uses YouTube API Services; see the YouTube Terms of Service and the Google Privacy Policy. Access can be revoked at any time from the Google security settings page.

Undercurrent Studio and TikTok

Undercurrent Studio also uses TikTok’s Login Kit and Content Posting API, with our own authorization, only to publish Undercurrent’s own videos and photo posts to Undercurrent’s own TikTok account (@undercurrentdaily). It doesn’t access any other TikTok user’s account or data.

What it receives from TikTok: a sign-in token for our account (an access token and a refresh token) and the permissions we granted; our account’s ID, display name and profile picture; before each post, our account’s posting settings (nickname, username, the audience options TikTok offers, whether comments, duets and stitches are allowed, and the longest video we can post); and the processing status of each post we make, with its public post ID once it’s live.

How it’s used: only to show which account a post goes to, offer TikTok’s own post settings, upload the post we approved, check that it went through, and keep its link in our publishing records. It doesn’t read followers, messages, comments or viewing data. We don’t sell, share or rent anything received from TikTok, and we don’t use it for advertising or profiling.

Where it’s kept, and for how long: the tokens and account details are stored only on the computer that runs Undercurrent Studio, not on this website or any other server. Access tokens expire after 24 hours and are renewed only while the Studio stays connected. Disconnecting TikTok in the Studio revokes the tokens with TikTok and deletes them and the account details from the Studio. Links and IDs of our own published posts stay in our publishing records. When we post photos, the image files are served from our own web address so TikTok can fetch them.

Control and deletion: access can be removed at any time from the TikTok app’s security settings (manage app permissions), or by disconnecting in the Studio. To ask us to delete anything received from TikTok, email hello@undercurrentdaily.com; we delete it within 30 days. TikTok’s own handling of data is covered by the TikTok Privacy Policy.

Changes and contact

If this policy changes, we’ll update this page and its effective date. Questions: hello@undercurrentdaily.com.