Privacy Policy

Harbinger Tribune — harbingertribune.com — Last updated: June 10, 2026

1. Introduction and Identity of the Controller

Harbinger Tribune (Insight Asia) is a digital news publication focused on Asia, operated by Harbinger Bros. LLC, a Wyoming limited liability company with its principal place of business at 1309 Coffeen Avenue, Sheridan, WY 82801, United States (“we,” “us,” or “our”). Contact: support@harbingerpressmedia.com.

For purposes of the GDPR, we act as data controller in respect of personal data collected through harbingertribune.com. We are subject to the GDPR by virtue of Article 3(2) GDPR, as we offer an information service accessible to individuals in the EU and monitor behaviour on this Website.

2. Scope and Territorial Application

This Privacy Policy applies to all visitors of harbingertribune.com. Our publication is primarily directed at English-speaking audiences interested in Asian affairs. Depending on your location, various privacy frameworks apply:

• EU/EEA visitors: GDPR (Regulation (EU) 2016/679) applies per Art. 3(2).
• United Kingdom visitors: UK GDPR and Data Protection Act 2018 apply.
• California residents: CCPA/CPRA applies.
• Wyoming residents: Wyoming Data Privacy Act applies where applicable.
• Canadian visitors: PIPEDA and applicable provincial laws apply.
• Visitors from Asia-Pacific jurisdictions: We apply reasonable equivalent standards. Visitors from Australia may benefit from Australian Privacy Act protections where relevant. Visitors from Japan, South Korea, Singapore, and other jurisdictions with comprehensive privacy laws are treated with equivalent respect for their data protection rights.

3. What Personal Data We Collect

We operate with a minimal data collection philosophy consistent with the principles of data minimisation under Article 5(1)(c) GDPR. We do not maintain user accounts, deploy advertising technology, or use third-party analytics services.

3.1 Infrastructure-Level Data (Processed by Vercel)

When you access harbingertribune.com, your request is routed through the infrastructure of Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA), our hosting provider. Vercel processes the following data as part of standard web server operation:

• Your IP address (used for routing and abuse prevention)
• HTTP request data: URL path, User-Agent string, referrer, timestamp, response code
• TLS handshake data necessary for secure connection establishment

We do not independently maintain server access logs or use IP addresses for identification or profiling. Vercel's infrastructure processing is governed by Vercel's data processing agreement and applicable data protection law.

3.2 Database Infrastructure (Supabase)

Our website content is served from a database managed by Supabase Inc. (970 Toa Payoh North #07-04, Singapore 318992). Supabase processes queries necessary to deliver articles and other content to your browser. No personal data submitted by you is stored in our Supabase database, as we do not accept user-generated content or registrations at this time.

3.3 Browser localStorage

We store one (1) item in your browser's localStorage:

This item is strictly necessary, does not identify you, and is never transmitted to any server. It falls within the §25(2) TDDDG / Art. 5(3) ePrivacy Directive strictly necessary exemption.

4. Legal Bases for Processing (GDPR)

• Art. 6(1)(f) GDPR — Legitimate Interests: Processing of technical request data by our hosting infrastructure is necessary for our legitimate interest in delivering a secure, functional website. Our legitimate interests assessment concludes this does not override your rights, given the limited scope of processing and absence of profiling.
• Art. 6(1)(c) GDPR — Legal Obligation: We may process data to comply with valid legal obligations.
• Art. 6(1)(a) GDPR — Consent: Applied for any future optional processing activities.

5. International Data Transfers

5.1 Transfer to the United States (Vercel)

Vercel Inc. participates in the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795). Transfers of EEA personal data to Vercel are covered by this adequacy decision. We additionally rely on Standard Contractual Clauses (Art. 46(2)(c) GDPR, Commission Implementing Decision (EU) 2021/914) as a supplementary safeguard.

5.2 Transfer to Singapore (Supabase)

Singapore does not currently benefit from an EU adequacy decision. Transfers to Supabase Inc. are governed by Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR. We have executed a data processing agreement with Supabase incorporating these SCCs. We have conducted a transfer impact assessment considering Singapore's Personal Data Protection Act 2012 (PDPA) and relevant surveillance laws, and have determined that the residual risk is low given the nature of data processed.

6. Data Retention

• Vercel server logs: Retained up to 30 days per Vercel's standard policy, then automatically deleted.
• localStorage data: Persists on your device until you clear your browser storage. We have no server-side access to this data.

7. Your Rights (GDPR — EU/EEA and UK Visitors)

Under Articles 15–22 GDPR, you have the following rights:

• Art. 15 — Right of access: Obtain confirmation and a copy of your personal data we hold.
• Art. 16 — Right to rectification: Correct inaccurate data without undue delay.
• Art. 17 — Right to erasure: Request deletion where data is no longer necessary, consent is withdrawn, or processing is unlawful.
• Art. 18 — Right to restriction: Request restricted processing in specified circumstances.
• Art. 20 — Right to data portability: Receive your data in a machine-readable format (applies to consent/contract-based automated processing).
• Art. 21 — Right to object: Object to processing based on legitimate interests. We will cease unless we demonstrate overriding compelling legitimate grounds.
• Art. 22 — Automated decision-making: We do not engage in automated decision-making or profiling with legal or similarly significant effects.
• Art. 77 — Right to complain: Lodge a complaint with your national supervisory authority (BfDI, CNIL, ICO, Garante, AEPD, or other competent authority).

Exercise any right by emailing support@harbingerpressmedia.com. Response within one month (Art. 12 GDPR).

8. California Residents (CCPA/CPRA)

California residents have the right to know what personal information is collected, to request deletion, to correct inaccurate information, and to opt out of sale or sharing. We do not sell or share personal information. Personal information collected in the preceding 12 months: Internet or other electronic network activity (server log data). To submit a request, email support@harbingerpressmedia.com with subject “California Privacy Request.” Response within 45 days.

9. Canadian Visitors (PIPEDA)

Canadian visitors may access and challenge the accuracy of personal information we hold. Contact us at support@harbingerpressmedia.com.

10. Asia-Pacific Visitors

We respect the privacy rights afforded to residents of Asia-Pacific countries under their national laws. While we are not established in any Asia-Pacific jurisdiction, we apply the principles of GDPR-equivalent protection globally. Residents of countries with comprehensive privacy laws (including Australia's Privacy Act 1988, Japan's Act on the Protection of Personal Information (APPI), South Korea's Personal Information Protection Act (PIPA), and Singapore's PDPA) may contact us at support@harbingerpressmedia.com to exercise any applicable rights.

11. Third-Party Services and External Connections

Harbinger Tribune operates without advertising revenue. We do not deploy advertising networks, retargeting pixels, or behavioural profiling technologies. The following third-party services are involved in the operation of this website:

Infrastructure Providers

• Vercel Inc. (650 California Street, San Francisco, CA 94108, USA) — website hosting and content delivery. Vercel processes server log data including IP addresses solely for the purpose of delivering web pages to your browser. Vercel’s privacy policy: vercel.com/legal/privacy-policy
• Supabase Inc. (970 Toa Payoh North, Singapore 318992) — database hosting. Supabase stores article content and site configuration data. No visitor personal data is stored in our database beyond what is described in this policy. Supabase’s privacy policy: supabase.com/privacy

Image Delivery

Article images may be hosted on and served directly from Unsplash (Unsplash Inc., Montreal, QC, Canada). When your browser loads an image from Unsplash servers, Unsplash may receive your IP address and standard browser request headers as part of the HTTP connection. We have no control over Unsplash’s data processing. Unsplash’s privacy policy: unsplash.com/privacy

Google Search Console

We use Google Search Console (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to monitor how harbingertribune.com appears in Google Search results and to identify and resolve indexing issues. Google Search Console provides us with aggregated, anonymised data about search queries and page performance; we do not receive personal data about individual visitors through this tool. Google’s privacy policy: policies.google.com/privacy

Social Media

We maintain social media presences on Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland), X / Twitter (X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA), and Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). The social media icons in our footer are simple hyperlinks — no social media plugins, share buttons, tracking pixels, or “Like” buttons are embedded on this website. Your browser makes no connection to any social media platform unless you actively click one of these links. When you click a link and are redirected to the platform, the platform’s own privacy policy governs all subsequent data processing.

12. Children's Privacy

This Website is not directed at children under 16. We do not knowingly collect data from children. Contact us if you believe a child's data has been inadvertently collected.

13. Security

We implement TLS/SSL encryption, infrastructure-level access controls, and contractual security obligations with our processors. We cannot guarantee absolute security of data in transit or storage, but we take industry-standard precautions.

14. Policy Updates

We will update this Policy as necessary. The date of last revision appears at the top of this page.

15. Contact

Harbinger Bros. LLC
1309 Coffeen Avenue, Sheridan, WY 82801, United States
Email: support@harbingerpressmedia.com