Privacy Policy

This policy explains what মুঠোখবর (muthokhobor.com) collects about you, why, how long we keep it, and how you control it. By using the site you accept this policy.

মুঠোখবর is a news-aggregation platform. Clicking the original-report link on a short takes you to the publisher’s own site, where their privacy policy applies. YouTube embeds are governed by Google’s policy (see Third parties).

Data controller: মুঠোখবর, Dhaka, Bangladesh. Contact: [email protected].

• Running the service: rendering pages, keeping you logged in, showing your saved stories and feed.
• Personalisation (logged in only): building “Your feed” from the categories and sources you follow. No profiling happens without an account.
• Notifications: sending browser notifications for important stories if you enabled them.
• Security: detecting spam, bots and abuse; rate limiting.
• Improvement: aggregate statistics on which sections and features are useful.
• Legal compliance: responding to valid requests under the laws of Bangladesh.

You can block or clear cookies and site data in your browser. Reading still works; only login and preferences are forgotten.

When you enable notifications your browser creates a unique “push endpoint” and encryption keys, which we store. They contain no name, email or identity — we cannot tell which endpoint belongs to whom. Messages are encrypted and delivered by your browser vendor’s push service (Google, Mozilla, Apple).

• When we send: when an editor flags a story as important. Never automated spam.
• Turning off: click the bell in the header, the footer button, or block “Notifications” in your browser’s site settings.
• When you disable it or the browser revokes the subscription, the stored endpoint is deleted.

• YouTube (Google): when an embedded player loads on a video page, Google receives your IP and browser data and may set its own cookies, under Google’s privacy policy.
• Google Analytics 4: anonymous usage statistics with IP anonymisation; advertising features disabled.
• Hosting & security: our servers and CDN (e.g. Cloudflare) process IPs and logs to serve requests — only on our behalf, under confidentiality.
• Advertising: if ads are shown they are served by our own system without personal targeting or third-party tracking pixels. Should that change, this policy will be updated first.
• Original-report links: publisher sites apply their own policies.

মুঠোখবর does not sell, rent or share your personal data for marketing. Data may be disclosed only in these limited cases:

• Service providers: hosting, CDN, email and analytics partners — acting on our instructions under confidentiality agreements.
• Legal obligations: valid written orders from Bangladeshi courts or competent authorities — to the extent the law requires.
• Safety emergencies: where necessary to protect someone’s life or public safety.
• Business transfer: if মুঠোখবর is transferred to another organisation, data moves under this same policy and you will be told.

• View & correct: change your name, avatar and password from your profile.
• Clear history: delete your reading history any time from the profile; unsave stories and unfollow at will.
• Delete your account: from profile settings, or by email. All personal data is permanently erased within 30 days; aggregate statistics contain no identity.
• Copy of your data: email us and we send your account data in a readable format (JSON).
• Stop notifications: bell icon or browser settings.
• Avoid analytics: use your browser’s tracking protection or a cookie blocker.

Send requests to [email protected] with the subject “Data request”, from your registered email so we can verify identity. Handled within 30 business days.

• Every page is served over HTTPS (TLS).
• Passwords are never stored in plain text — only as strong one-way hashes.
• Server access is limited to authorised staff with key-based authentication; login and API endpoints are rate limited.
• Push messages are end-to-end encrypted (Web Push standard).

Anyone may read মুঠোখবর, but you must be at least 13 to create a reader account. We do not knowingly collect data from children under 13. Parents who become aware of such an account should email us; we will delete it promptly.

• Updates are published on this page and the “Last updated” date above changes.
• For significant changes (e.g. a new kind of data collection) we post a site notice and email registered readers.
• Continued use after a change means you accept the updated policy.

Any privacy question, complaint or request: [email protected]. For the general rules of the service see the Terms of Use.