Data & Compliance

What this page means

This page describes the reviewed service and the process for raising data concerns. It is not a certification, regulatory registration, independent security audit or statement that WASABI meets every law worldwide. The publication name does not establish a separate incorporated entity.

Legal obligations depend on the operator, the people served, the purposes of processing and the applicable territorial rules. Nigeria’s data-protection framework and any other laws that apply must be assessed on those facts; international accessibility alone does not answer every jurisdiction question.

Controls implemented in the service

Passwords are hashed with bcrypt. Authentication tokens and password-reset tokens are stored as hashes. Reset links expire after 30 minutes, work once, and are invalidated by relevant password changes. A successful reset revokes existing sessions. Recovery requests use persistent rate limiting and a generic account-existence response.

Article searches check account roles on the server: writers are restricted to their own work, while editorial access is checked separately. Necessary session cookies use HttpOnly and SameSite protections, with Secure on HTTPS. Optional website analytics, article-count cookies and reading/offline storage are controlled by the cookie choices. These controls reduce particular risks; they are not a guarantee against every attack.

Retention, providers and operational responsibilities

The Privacy Policy lists the main processing purposes and providers. Retention depends on the record’s purpose, requests and lawful exceptions. We do not claim that fixed backup rotation, universal deletion deadlines, every international-transfer mechanism or an annual compliance audit has been independently verified by this page.

Requests for access, correction, deletion, restriction, objection or portability are handled through the operator’s contact address and assessed under applicable law. Contact us for a specific record or provider rather than assuming that expiry of a token means immediate deletion of every associated database or backup copy.

Security concerns and incidents

Report a suspected compromise privately with the affected URL, time and a concise description. Do not exploit another account, download unnecessary personal data or disclose passwords or live reset links. We will assess the report, contain and investigate relevant incidents, and provide any notifications required by applicable law. Notification duties and deadlines depend on the applicable law and the assessed incident; this page does not assert that every event must be notified on the same timetable.

Complaints and authorities

You can contact the operator or a relevant authority. In Nigeria, see the Nigeria Data Protection Commission. In the EU/EEA or UK, your competent authority may also be able to assist where its rules apply. Exercising a right or raising a complaint must not be treated as permission for marketing.

More detail is in the Privacy Policy and Cookie Policy.

Contact and requests

Send privacy requests, corrections, complaints and legal notices to wasabimedia623@gmail.com. Identify the relevant account or page and explain what you need. Do not send passwords, reset links, unnecessary identity documents or sensitive information.

We may need proportionate evidence of identity or authority before disclosing, changing or deleting account data. We aim to respond promptly and must meet any response period that applicable law requires. You may complain directly to a relevant data-protection authority without contacting us first.