1. Controller / organisation responsible
The organization responsible for FreePass.news is FreePass.news. The person responsible for the protection of personal information can be reached at privacy@freepass.news; this title and contact are published for privacy requests, rights requests and complaints.
2. Information we collect
Depending on your actions, FreePass may process interface region/language preferences; session and CSRF identifiers; a pseudonymous visitor token used when you request a publisher; IP and user-agent security signals; publisher requests and intent level; account name, email and password hash; email-verification events; consent receipts; publisher-claim professional information; and security/audit logs.
3. Purposes
We use this information to provide and secure the service, maintain accounts, deduplicate and qualify publisher demand, prevent fraud, verify email addresses and publisher claims, honour consent choices, produce privacy-preserving aggregates, operate publisher pilots, and comply with legal obligations.
4. Legal bases where GDPR applies
Where the GDPR applies, processing may rely on performance of a contract or steps requested before a contract, legitimate interests in operating and securing FreePass and preserving metric integrity, compliance with legal obligations, or consent for genuinely optional purposes such as publisher alerts. Consent may be withdrawn without affecting prior lawful processing.
5. Cookies and similar storage
This release uses only first-party cookies necessary for session security, user preferences, anonymous-demand deduplication/fraud prevention, and remembering that the cookie notice was acknowledged. No advertising or optional analytics cookies are active. Details and lifetimes appear on the Cookie Policy page.
6. Sharing with publishers
Public demand data is aggregated. A publisher may receive a pairwise pseudonymous identifier rather than a universal cross-site identifier. Reader contact information or other personal information is shared with a publisher only for a stated purpose and valid legal basis, including separate consent where required. Professional publisher contacts expressly supplied or approved by a participating publisher may be displayed publicly as participation proof.
7. Retention
FreePass keeps personal information only as long as necessary for the stated purposes, legal obligations, security and dispute handling. Full IP payloads used for abuse controls are encrypted and configured for limited retention; diagnostic logs are time-limited. Account, demand, consent and audit records may need longer retention while the account or relevant relationship remains active or where legal claims require it.
8. Security
Measures include HTTPS, secure session cookies, CSRF protection, prepared SQL statements, password hashing, encryption of limited IP payloads, rate limits, private application/configuration directories, audit trails and least-necessary logging. No security measure can guarantee absolute security.
9. Transfers outside Québec / the EEA
Hosting, email or service providers may involve processing outside your province or country. Before protected personal information is transferred where applicable law requires it, FreePass must assess the transfer, use appropriate contractual/safeguard measures and document the legal basis.
10. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, information about processing, or withdrawal of consent, and may object to certain processing. Requests can be sent to privacy@freepass.news. Identity verification may be required before disclosure or deletion.
11. Complaints
You may complain first to FreePass through privacy@freepass.news. You may also contact the Commission d’accès à l’information du Québec, the Office of the Privacy Commissioner of Canada where applicable, or an EU/EEA supervisory authority where the GDPR applies.
12. Children
FreePass is not designed to knowingly collect personal information from children below the age at which they can validly consent under applicable law. Additional parental or guardian consent rules may apply, including Québec rules for children under 14.
13. Automated decisions and profiling
Anti-fraud controls may flag requests for review, but the public product should not make significant legal or similarly significant decisions about a person solely through opaque automated profiling. Where applicable law gives additional rights, FreePass will provide the required information and review path.
14. Changes
Material changes to this policy will be dated and communicated through the site. The current legal-policy version is 2026-09-19.