Privacy & Data Disclosure

Last updated: 2026

This Privacy Notice supplements Section 18 ("Privacy and Data Protection") and Section 19 ("Cookies and Tracking") of our Terms & Conditions. It describes the specific categories of data that Nova Presswire collects when readers view press releases distributed through the Service, and how readers can exercise rights available to them under their local data-protection laws.

1. Data Controller

Nova Presswire (the "Service") is the data controller for the analytics and tracking data described below. For privacy questions, data-subject access requests, or to exercise any of the rights described in Section 7, please use the Contact page.

2. Tracking Pixels Embedded in Distributed Press Releases

Press releases distributed via Nova Presswire — whether on our website, in our RSS/Atom/NewsML-G2 feeds, in the XPR Media wire feed, or via syndication partners — may contain up to three 1×1 transparent tracking pixels per release: one near the top of the body, one in the middle, and one at the bottom. The pixels are served from /api/pixel/<press-release-id>/<position>.gif on the novapresswire.com domain.

When a reader's browser or email client loads a pixel, the following fields are recorded in our analytics database:

• IP address — used for bot filtering, approximate country-level geolocation, and rate limiting.
• User agent string — the browser/device identifier sent by the reader's HTTP client.
• Referrer URL and referrer domain — the page from which the press release was opened.
• Approximate country — derived from the CF-IPCountry header set by our Cloudflare edge.
• Pixel position (top / middle / bottom) — used as a coarse proxy for scroll depth.
• Campaign and source parameters — values of utm_campaign, utm_medium, and any ?s= source identifier appended by the distributing partner.
• Timestamp — when the pixel was loaded.

The pixel request does not set any cookies and does not execute JavaScript. Each pixel responds with a single transparent GIF.

3. Short-Link Click Tracking

External links inside distributed press releases are rewritten to short links of the form https://novapresswire.com/l/<code>. When a reader clicks a short link, we record the same categories of data listed in Section 2 before issuing a 302 redirect to the original destination URL. The redirect target is unchanged from the URL the issuer placed in the release.

4. Trackable Images and Logos

Images and logos served via /assets/t/<code> may be embedded in distributed press releases for view-counting purposes. The same categories of data described in Section 2 are recorded on each request.

5. Website Analytics (novapresswire.com)

Our public website uses Google Analytics (GA4) to measure site usage. Google Analytics may set first-party cookies and processes IP addresses and device data subject to Google's own privacy policy. We use the data only in aggregate to improve site content and performance.

Server-side session cookies (used for login state and CSRF protection in the customer dashboard and admin panel) are strictly necessary for the operation of those areas and are not used to track readers of public press-release pages.

6. Purposes & Legal Bases (GDPR / UK GDPR)

For readers in the EU/UK, where data described above constitutes personal data, we rely on the following legal bases:

• Legitimate interest (Art. 6(1)(f) GDPR) — for the aggregate measurement of press-release distribution effectiveness, fraud/bot detection, and basic security. We have minimised the data set (no cookies on pixels, country-level geolocation only).
• Contract (Art. 6(1)(b) GDPR) — for the operation of the customer dashboard, billing, and team management for our paying customers.
• Consent (Art. 6(1)(a) GDPR) — for marketing emails. Consent is requested at sign-up and may be withdrawn via the unsubscribe link in every email or by visiting /unsubscribe.

7. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; request correction or deletion; restrict or object to certain processing; request portability of data you have provided; and lodge a complaint with your supervisory authority. To exercise any of these rights, contact us via the Contact page.

To reduce or block tracking for your own browsing, you can use your browser's built-in tracking-protection features, a content/ad blocker that filters 1×1 GIF requests, or block third-party cookies. You can opt out of Google Analytics specifically by installing the official Google Analytics opt-out browser add-on.

8. Retention

We retain raw pixel-view and click records only for as long as is reasonably necessary to operate the analytics and reporting features of the Service. Records are periodically aggregated into non-identifying summary statistics, and the underlying raw records are deleted thereafter. Customer account data is retained for the duration of the customer's subscription and for a reasonable period afterwards for billing, tax, and audit purposes, then deleted or anonymised. If you would like a specific record erased before its routine retention period expires, contact us via the Contact page.

9. Recipients and Processors

Pixel and click data is processed by Nova Presswire and by infrastructure providers acting on our behalf (currently including Hetzner for hosting, Cloudflare for CDN and edge services, Google for website analytics, ZeptoMail/Zoho Mail for transactional email, and Stripe for billing). Aggregate, non-identifying performance metrics are shared with the press-release issuer (our customer) and with distribution partners (for example XPR Media) so they can report reach to their own clients. We do not sell personal data, and we do not share IP addresses with our customers or with distribution partners.

10. International Transfers

Some of the processors listed in Section 9 are based outside the European Economic Area and the United Kingdom. Where personal data is transferred internationally, we rely on the lawful transfer mechanisms made available by those processors (for example, Standard Contractual Clauses or equivalent safeguards published by the recipient).

11. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us via the Contact page and we will delete it.

12. Changes to This Notice

We may update this Privacy Notice from time to time. Material changes (for example, new categories of recipient or new tracking technologies) will be reflected on this page and, where required, communicated by email to active customers.