Scope and operator
This policy applies to the Jotuno website at jotuno.com, including articles, author pages, comments, article engagement, contact enquiries and business-directory features. It does not govern an external website merely because Jotuno links to it.
Information we collect
Depending on how you use the site, Jotuno may process:
- contact details and message content submitted through the Contact page;
- business-listing and authorised representative information;
- Google account information used for comment authentication;
- comment text, public display name, moderation status and a one-way identifier hash;
- article-view, reaction and share counters, plus a pseudonymous reader identifier;
- essential session information required for security, forms, login state and view counting;
- technical server records normally produced by web hosting, such as request time, browser information and network address.
Why information is used
Information is used to operate and secure the website, respond to enquiries, moderate comments, prevent repeated or abusive activity, manage directory submissions, record aggregate engagement, maintain editorial accountability and comply with applicable obligations. Jotuno does not sell personal information.
Google-authenticated comments
Commenting uses Google OAuth with the openid, email and profile scopes. Google supplies a verified account identifier, name and email address. The name is used as the public comment name. The email is held in the active login session and is not written into the persistent public comment record.
The comment record stores the article, comment text, public name, timestamp, moderation status and a one-way SHA-256 hash of the Google identifier. Comments require manual approval. Google processes sign-in information under its own privacy terms.
Article views, reactions and shares
Jotuno uses an HTTP-only cookie named jotuno_reader_id, normally lasting up to one year, to distinguish repeated like or dislike actions without creating a named reader account. The database stores a one-way hash of that identifier with the selected reaction. Article views and shares are counted mainly in aggregate, with session controls used to reduce immediate repeat counting.
Social-share buttons may open Facebook, X, LinkedIn, WhatsApp, an email application or the device’s native share feature. Those services receive information only when you choose to interact with them and apply their own policies.
Contact and correction enquiries
The Contact page collects name, email, enquiry type, subject, message and an optional relevant URL. Messages are stored in a restricted administrator Inbox and may also generate an email notification to Jotuno. Please do not submit unnecessary sensitive information.
Hosting and service providers
Information may be processed by the website host, email infrastructure, Google for authentication and other providers needed to deliver a feature you request. We may disclose information where reasonably necessary to protect rights and safety, investigate abuse, comply with law or respond to a valid legal request.
Retention
We retain information only while reasonably needed for the purpose described, security, dispute handling, editorial records or legal obligations. Contact messages should be reviewed and deleted when no longer required. Approved comments may remain with the related article; rejected comments may be retained for moderation consistency and abuse prevention. Aggregate engagement may remain after individual session data expires.
Security
Jotuno uses measures including HTTPS, restricted administrator access, CSRF protection, HTTP-only cookies, manual comment approval, input validation and database access controls. No internet system can guarantee absolute security. Do not send passwords, payment-card details or highly sensitive records through general contact forms.
Your choices and requests
You may clear website cookies through the browser, sign out of comments and choose not to submit optional information. You may request access, correction or deletion of information linked to you where applicable and reasonably verifiable. Use “Privacy request” on the Contact page and describe the relevant interaction. We may ask for proportionate verification before changing or disclosing records.
Children
Jotuno is intended for a general audience and is not designed to knowingly collect personal information from young children. A parent or guardian who believes a child submitted information should contact us with enough detail to locate it.
Policy changes and contact
We may update this policy when features, providers or legal requirements change. The updated date identifies the latest published version. Privacy enquiries can be submitted through Contact Jotuno or emailed to hello@jotuno.com.