Privacy Policy

Who is responsible

WASABI Media is an independently operated editorial publication at wasaabi.world. “WASABI”, “we” and “us” refer to the operator identified on this page, using WASABI Media as the publication name; that name does not imply incorporation or a registered company.

This policy covers the website and services using its backend, including account and contributor features. Native app storage and permission controls can differ from this website’s cookie controls. Other sites you visit through links apply their own policies.

Information we process

Account information includes your name, username, email, password hash, role and account status, and any profile photo, biography or social links you provide. Authentication uses session tokens stored on the server as hashes. Password recovery uses a hashed reset token, expiry time and a password-hash snapshot, plus hashed email/IP rate-limit keys and request counters.

Content and activity include drafts, published articles, comments, likes, saved articles, follows, writer applications and information you send to the editorial team. Article recovery keeps up to 100 saved content checkpoints per article, accessible to its authorized writer and editorial team; older checkpoints are replaced as new ones are kept. Newsletters use your email, optional name, selected topics and subscription status. Some profiles, bylines, articles and comments are public; do not include private information in them.

Requests to the site, database, image providers and email services can expose technical information such as IP address, browser details and request times to those providers. If you accept analytics, we use aggregate article read counts and Vercel Web Analytics. Reading position is stored on your device only when optional reading features are enabled.

Purposes and legal grounds

We use account and session information to provide features you request, publish and moderate contributions, review applications, and help you recover access. The appropriate legal ground depends on the activity: performance of an agreement or steps requested before it, legitimate interests in maintaining and securing the publication, or a legal obligation.

Newsletter subscriptions and optional analytics/reading storage use your choices or consent as described in their controls. Registration does not subscribe you to a newsletter or opt you into optional cookies. You can unsubscribe from newsletters and change website cookie choices independently. Where we rely on consent, withdrawal does not make earlier lawful processing unlawful. Where legitimate interests apply, you can object subject to applicable law.

Providers and international processing

Providers may process information outside your country. Applicable transfer requirements must be assessed for the relevant provider and location; this page does not certify that every transfer relies on the same legal mechanism. Contact us for information about a particular processing location or safeguard.

We do not use the reviewed website integrations to sell personal information, run advertising pixels or perform cross-site advertising profiling. Any material new use or provider will require an updated notice and, where necessary, a fresh choice.

Cookies and device storage

Necessary sign-in and security features remain available when optional features are rejected. Analytics and optional reading/offline features start disabled. You can accept, reject or customize them, and reopen your settings in the footer. We do not treat scrolling or continued browsing as agreement.

Read the Cookie Policy for cookie names, purposes, durations and provider information.

Retention, deletion and security

We keep information for the purpose it serves and any necessary legal, security or dispute records. Account and contributor records may remain while the account or editorial relationship is active. Unsubscribing stops future newsletters; a limited suppression record may remain to prevent accidental re-subscription. Published work and moderation or copyright records can have a different retention need from an account profile.

Reset links stop working after 30 minutes, after use, when replaced, or after the associated password changes. Expiry is not a promise that every database record is immediately physically erased. Security counters and expired records are removed or replaced through the relevant cleanup operations and legitimate retention review.

Articles moved to Trash remain recoverable for 30 days. They are hidden from publication and normal article lists, and restore as drafts. After that deadline, scheduled cleanup permanently removes the article and its saved checkpoints; processing delays are possible. Backup copies can remain until their separate retention period ends.

Request deletion or a retention explanation through the contact below. We will assess exceptions and explain any information that must remain. Copies can persist temporarily in provider backups and caches; we do not claim a universal automated deletion or backup schedule. Password hashing and secure session controls reduce risk, but no system is guaranteed secure.

Your rights and complaints

Depending on the law that applies, you may request information and access, correction, erasure, restriction, portability, or object to processing, and withdraw consent. Rights are subject to applicable exceptions, identity checks and deadlines. Requests do not require a particular legal phrase. We do not make solely automated decisions with legal or similarly significant effects through the reviewed features.

Nigeria’s data-protection authority is the Nigeria Data Protection Commission (NDPC). People elsewhere may also contact their competent local authority. Visiting from another country does not mean every law of that country automatically applies; mandatory protections that do apply are not waived by these policies.

Children and sensitive information

Accounts are not intended for children under 13. If local law requires a higher age or valid parent/guardian authorization, that requirement also applies. Do not create an account or subscribe a child when the required authorization cannot be established. Contributor accounts are intended for adults aged 18 and over.

We do not ask readers for health information, identity-document numbers or payment-card details. Tell us if you believe a child’s information or sensitive information has been provided inappropriately, so that we can assess and remove or restrict it as required. A policy statement is not an age-verification system.

Contact and requests

Send privacy requests, corrections, complaints and legal notices to wasabimedia623@gmail.com. Identify the relevant account or page and explain what you need. Do not send passwords, reset links, unnecessary identity documents or sensitive information.

We may need proportionate evidence of identity or authority before disclosing, changing or deleting account data. We aim to respond promptly and must meet any response period that applicable law requires. You may complain directly to a relevant data-protection authority without contacting us first.

Changes to this notice

The date above identifies this version. Material changes to purposes or optional technologies will be explained before they take effect, and fresh consent will be sought where required. Check the current notice when using a new feature.