Privacy policy

Who we are #

This policy covers TalkofNaija (talkofnaija.com), which is operated by PathForge Studio. For any privacy question or request, email talkofnaija@gmail.com.

The short version #

You can read, watch, search and save stories without an account, and we do not track you while you do.
An account is only needed to comment. It holds your email or your Google identity, a display name and your comments.
We do not use third-party analytics or advertising trackers. We do not sell personal information.
Notifications are optional and only start when you press “Turn on notifications”.

Information kept only on your device #

Some features work entirely in your browser and are not sent to us: saved stories, recent searches, video resume points (kept 7 days), your appearance choice (Light, Dark or System), playback preferences such as captions and data saver, Storylines you follow, and offline copies of stories you opened (up to 30, kept 7 days, without photos).

To check whether saved stories or followed Storylines are still available, your browser sends us only the story identifiers, and we do not store them. You can clear device data in Menu → Data on this device, or in your browser settings.

If you create an account #

With email: we store your email address and send you a six-digit sign-in code. We keep only a scrambled form of the code. It works for 10 minutes and allows five tries.
With Google: Google tells us your Google account identifier, your email address (if Google has verified it) and your name. We use your name as your first display name, which you can change. We do not receive or store your Google profile photo, password or contacts, and we store no Google access tokens.
Your profile: your display name is public next to your comments. Your email is never shown to other readers.
Signing in: a session cookie keeps you signed in for up to 30 days.

Accounts are for people aged 18 or over.

Comments and reports #

Comments and replies are public, with your display name. Before a comment appears, automatic checks look for things like phone numbers, links or threats; a flagged comment waits for a person and is never removed automatically. When anyone reports a comment, we record the report, the reason and any note. To prevent abuse we also record a scrambled identifier derived from your network connection that changes every day; we do not store your IP address. Only the site owner can see who made a report, and every such look is recorded.

Messages you send us #

When you use the contact, correction, advertising or copyright forms, we store what you enter (such as your name, email, message and any link) so we can deal with it, together with the same daily-changing network identifier to stop spam. We do not send automatic confirmation emails. Files you attach are held unopened until we can check them safely.

Notifications #

If you press “Turn on notifications”, your browser asks your permission; we never ask at any other time. If you allow it, your browser gives us a push address for this device (an address at your browser’s push service: Google, Mozilla, Apple or Microsoft) and keys to send to it. We store that address, the choices you make (such as breaking news, topics, followed stories and quiet hours), a simple device label such as “Chrome on Android”, and a private code that lets this device change or turn off its notifications. We never ask for your name or email for notifications. If you are signed in, you can choose to link the device to your account to manage all your devices in one place.

A person at TalkofNaija approves every notification; none are sent automatically. We do not record when you open or dismiss a notification, or whether you were asked for permission. You can turn notifications off on the Notifications screen, in your browser settings, or for all linked devices from Your devices. Records for turned-off devices and delivery records are deleted after 30 days.

Cookies #

We use only cookies that the site needs to work. We do not use advertising or analytics cookies.

__Host-ton_reader keeps you signed in to your reader account (up to 30 days).
__Host-ton_oauth protects a Google sign-in while it is in progress (10 minutes).
__Host-ton_admin and __Host-ton_admin_flow are used only for staff sign-in on the separate admin site (up to 12 hours).

Embedded posts and videos (YouTube, Vimeo, Instagram, X, TikTok, Facebook) load only when you tap to show them. When you do, that service receives your request and may set its own cookies under its own policy.

Measurement and advertising #

We do not currently measure what individual visitors read, and we use no third-party analytics service. We show no advertising from ad networks. Sponsored stories, if any, are clearly labelled and share no reader data with the sponsor. We will update this policy before we change any of this.

Security and records #

We protect accounts with scrambled session tokens, limits on repeated attempts, and multi-factor sign-in for all staff. Our own systems do not store visitors’ IP addresses. Our hosting provider handles connection data such as IP addresses to deliver the site. We keep a record of staff actions (such as publishing, corrections and moderation decisions) to keep the newsroom accountable. No online service is completely secure.

Automated newsroom tools #

Our newsroom software works with published news sources, not with readers’ personal information. It does not use your account, comments or browsing to decide what to publish.

How we use information, and who receives it #

We use information to run your account and show your comments, to moderate the community and prevent abuse, to answer messages, to send sign-in codes and the notifications you choose, and to keep the service secure.

Railway hosts the site, its database, files and backups, in the Netherlands (EU).
Resend sends sign-in codes from its EU (Ireland) region; it receives your email address and the message.
Google handles Sign in with Google, only if you choose it.
Your browser’s push service carries the encrypted notifications you turned on.

We do not sell personal information. We may disclose information where the law requires it.

How long we keep information #

Sign-in code records: 30 days. Expired sessions: 90 days. The hidden text of deleted or removed comments: 90 days, unless needed for an open moderation case or a legal matter. Comment reports and restrictions: 1 year after closing. Messages to us: 2 years after closing, and their attachments 90 days after closing. Notification records for turned-off devices: 30 days. Records of staff actions: 7 years. Backups: up to 14 days. Your account and public comments stay until you delete them or we remove them under the community guidelines.

Your choices and rights #

See and change: you can see and change your display name and your comments in your account.
Delete your account in Account settings (see below).
Ask for a copy or a correction: email talkofnaija@gmail.com. We aim to respond within 30 days.
Turn off notifications at any time, as described above.
You may also have rights under the law that applies to you, including the right to complain to the Nigeria Data Protection Commission.

Deleting your account #

You can delete your account in Account settings. This removes your email, Google link and display name and signs you out everywhere. Your comments disappear from public view; replies from other readers stay, under “This comment was deleted.” Backups that still contain your account are deleted within 14 days.

Children #

You can read TalkofNaija at any age, but accounts are only for people aged 18 or over. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy #

We will date every change at the top of this page and explain significant changes before they take effect.