🔐 Privacy Policy for Journo Lists / NewsX

Last updated: July 2025

1. Introduction

Journo Lists is an independent NewsX project dedicated to providing editorial privileges and protections to content creators who follow the Editors’ Code of Practice. The Journo Lists project is non-partisan and non-secular, and operates on the principle that only your editorial role and entitlement — not your background, beliefs, or affiliations — determines your status within the system.

Your eligibility for a press credential is based solely on whether you are entitled to editorial privileges, and to what degree. This is assessed through a structured, tiered system, and is reflected in the type of press card you are issued.

This Privacy Policy outlines what data we collect, how we use it, and how we protect your information, with full respect for the Editors’ Code of Practice, your individual editorial freedom, and international data protection laws including GDPR and CCPA.

2. What Data We Collect

We collect the following categories of data:

  • Identity Data: Your legal name, date of birth, and nationality (as extracted from your government-issued ID)
  • KYC Documents: A photograph of your official ID (e.g., passport) and a matching selfie used for verification
  • Press Card Photo: A separate, high-quality photo submitted for your press credential
  • Contact Data: Email address and optional social/contact links
  • Profile Data: Biography, platform type, language, editorial role, media affiliations, areas of expertise
  • Work Samples: Optional links to published journalism or scanned cuttings
  • Technical Data: IP address, device type, cookies, and usage logs
  • Verification Logs: Internal records of gatekeeper reviews, verification outcomes, and institutional access (where applicable)

3. How We Use Your Data

We use your data to:

  1. Verify your identity (KYC) and determine your eligibility for a press credential
  2. Issue and print your press card, including digital and physical formats
  3. Display a limited, public-facing profile, based on visibility settings you select
  4. Enable secure communication and credential verification by trusted organizations (e.g., UN, accredited press bodies) with restricted access

A list of authorized bodies permitted to request access is maintained here: [Insert URL or section placeholder: XXX]

  1. Fulfill legal or regulatory obligations but only where required under applicable law and in accordance with the Editors’ Code of Practice.

We draw a firm line between:

  • Formal legal demands (e.g., court orders, statutory obligations), which we comply with as required
  • Informal or unofficial requests, which we assess independently and may refuse unless legally compelled

Examples:

  • ✅ If a court order requires us to confirm the identity of a journalist in relation to a legal investigation, we may be legally obligated to comply.
  • ❌ If a government press office requests the real name of a journalist who published a critical piece, and no legal obligation exists, we will decline the request.
  • ❌ If a protest organizer or private company asks for the name of a photographer covering a sensitive event, we will not provide it unless legally mandated — and we will consult the journalist involved where possible.

These protections are in place to preserve journalistic independence and to protect reporters, particularly in hostile or high-risk reporting environments.

4. Public Profile & Visibility Settings

Your byline name and any linked work samples are publicly visible by default. After onboarding, you will be prompted to select what other information, such as your press card photo, bio, language, or affiliations, you wish to make public.

All additional profile fields are private by default and only displayed if you choose to enable them. You can update your visibility settings at any time.

5. Press Card Scanning (QR Code / NFC Chip)

Your physical and digital press card contains a scannable QR code and NFC chip.

When scanned by an unauthenticated party (e.g., at a venue checkpoint), only the following details may be shown:

  • Byline name
  • Editorial role
  • Card tier (e.g., Editor, Spotter)

  • Verification status
  • Press card photograph (as printed on the card)
  • ⚠️ This photo is mandatory and is separate from the KYC photo taken during identity verification. It must meet specific formatting standards and is used solely for visual identification on your physical and digital press card.
  • Scanning the card (via QR or chip) does not expose your full profile, legal name, contact info, or any private documents. Only trusted institutional partners with secure access may view further details.

6. Trusted Partner Access

Approved institutional partners (e.g., the United Nations, accredited press authorities) may be granted restricted access to your data for official press verification purposes.

Access is:

  • Password-protected
  • Manually approved by NewsX administrators
  • Logged and auditable

Authorized partners may view:

  • Full journo profile (even hidden fields)
  • Press card photo
  • KYC documents (ID and selfie)
  • Contact details (if permitted)

This access is granted only when strictly necessary and justified, and journalists are informed of this arrangement during onboarding.

7. Bylines, Pseudonymity & Accountability

When you register, you select a unique editorial byline, which becomes your public-facing identity. You are not required to publish under your legal name, and your true identity is not made public.

However, your byline is permanently tied to your verified legal identity in our internal systems. Once verified, it cannot be changed, and any content or claims made under that byline remain associated with your real identity.

This ensures you retain privacy while maintaining trust and editorial accountability within the ecosystem.

8. Data Security

We use industry-standard security protocols to protect your data, including:

  • HTTPS encryption
  • Access control systems
  • Secure file storage for KYC documents
  • Admin-reviewed access for partner institutions

9. Cookies

We use essential cookies for platform functionality, and optional cookies for analytics and experience optimization. You may configure your cookie preferences via our [Cookie Consent Manager].

Developer Note: Implement a Cookie Consent Manager that appears on first visit and includes:

  • A clear explanation of cookie types (e.g., essential, analytics, marketing)
  • Options to:

    • Accept all
    • Reject non-essential
    • Customize settings

  • Consent must be stored (via a cookie or localStorage) and remembered on return visits
  • No non-essential cookies (e.g., Google Analytics) should load until consent is explicitly given

You may use a third-party tool (e.g., Cookiebot, Osano, or a self-hosted script) that integrates cleanly with the frontend and offers user-level consent logging.

10. Data Retention

We retain your data only as long as necessary to:

  • Operate and maintain your account
  • Comply with legal or regulatory obligations
  • Preserve the integrity of the platform and its verification records

11. Your Rights

Under applicable law, you may:

  • Access or correct your personal data
  • Request deletion of your account or documents
  • Withdraw consent for any public-facing content
  • Object to or restrict certain types of processing
  • Receive a copy of your stored data

To make a request, contact:
📧 privacy@journo-lists.com

12. Contact

If you have any privacy concerns or data questions, you may contact us at:
📧 privacy@journo-lists.com