Privacy & cookies

Reading needs no account. What we keep is below, all of it: six cookies and one kind of event.

Cookies

nf_pack

The sector you last read, so Nordrift opens there again. One year.

nf_lang

The language you chose. One year.

nf_theme

The display you chose: system, light or dark. One year.

session

Only after signing in: the proof that it is you. Gone when you sign out.

nf_channel

How you found us (search engine, link, campaign), under a random number that says nothing about you. 180 days.

nf_intent

Only when you save an article before signing in: which article that was, so it is saved once you are in. Fifteen minutes.

What we count

For a first visit and for a signup we record one line: the moment, the kind of event, the sector and the channel. On top of that, one line per day that you read a sector — the day and the sector only, no channel, however often you come back that day. That tells us whether people keep reading, not what anyone read. No IP address, no browser details, no page history. Those lines are deleted after thirteen months.

Server log

The web server records one technical line per request: the moment, the IP address the request came from, the path asked for, the status code and the browser string. This is not analytics — it is separate from what is counted above and it is never linked to your account. It exists so that a fault or an abuse can be reconstructed afterwards. These lines are deleted after seven days.

Signing up, and consent

You sign up by entering your email address; the subscription only becomes active once you type in the login code we email you. What we keep of that consent is the moment you gave it and the code event itself — no IP address. If you sign up but never type a code, you receive nothing except that code, and we delete your account entirely after seven days.

Addresses that refuse mail

If your mail server refuses our mail permanently, or you mark us as spam, we add your address to a suppression list and delivery stops. Three temporary refusals within seven days do the same; one successful delivery resets that counter. We keep that list even if you ask us to erase your data: discarding it would mean you could end up back on the mailing list later, which is exactly what it exists to prevent. It holds nothing but the address, the reason and the moment.

Checks when you sign up

The signup form carries a hidden field and a timestamp that stop automated signups, and we refuse addresses at known disposable-mail services. We also check, after you sign up, whether your address's domain exists. That check never blocks: DNS answers contradict each other and change, so we record only the outcome and always let your signup through.

Notifications

If you turn notifications on, your browser gives us an address at its own push service (Google, Mozilla or Apple, depending on the browser) plus two keys that let only that one device open the text. That address identifies a browser, not you: it hangs off your account because otherwise we would not know which sectors to send there. We cannot see whether a notification arrived or was read — the push service only tells us whether the address still exists. Turn notifications off and the address is gone from our side; delete your account and it goes with it.

Third parties

There is no analytics, advertising or tracking script on this site. Press photos are fetched from the publisher without telling them which page you are reading. Typefaces come from Google Fonts. Email is sent through Resend, and only if you sign up.

Contact

Questions, access or deletion: write to redactie@nordrift.app. We answer every request, even if it is only to say we hold nothing about you.