Privacy Policy

This website, newportexchange.org, and the Newport Exchange API (together, the “Service”) are operated by Newport Exchange (“we”, “us”). We are responsible for the personal information described in this policy. You can reach us at [email protected].

You can browse the website without creating an account, and we do not ask for your name, email address or payment details to read it. We collect the following:

• Technical request data. When your browser or application requests a page or an API endpoint, our servers and our content-delivery and security provider automatically receive your IP address, browser or client type (user agent), the page or endpoint requested, the referring page and the time of the request. We use it to deliver the Service, apply rate limits and protect it against abuse.
• API key holders. If we issue you an API key, we record the name and email address you give us, the key’s permissions and rate limit, and when the key was last used. We store only a one-way hash of the key itself, never the key.
• Messages you send us. If you email us, we keep the message and your email address so that we can reply.
• Preferences stored in your browser. The API documentation remembers the programming language you last selected for code examples, using your browser’s local storage. This stays on your device and is not sent to us.

We do not currently use website analytics tools, and we do not knowingly collect sensitive personal information.

We use Google AdSense to display advertising, which helps keep the Service free. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet.

You may opt out of personalised advertising by visiting Google’s Ads Settings, and you can opt out of some third-party vendors’ use of cookies for personalised advertising at aboutads.info. Google explains how it uses information from sites that use its services at policies.google.com/technologies/partner-sites. Where the law requires your consent before such cookies are set, they are only set once you have given it.

Our security and content-delivery provider may also set strictly necessary cookies used to distinguish legitimate visitors from automated abuse. These do not track you across other websites.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site from working.

• To operate, maintain and deliver the website and API.
• To issue, authenticate, rate-limit and revoke API keys, and to contact key holders about their keys or changes to the API.
• To detect, investigate and prevent abuse, fraud and security incidents.
• To display advertising, as described above.
• To reply to your messages.
• To comply with legal obligations and enforce our Terms of Service.

Where the EU or UK General Data Protection Regulation applies, we rely on: performance of a contract, to provide the API to key holders; our legitimate interests in running, securing and improving the Service and responding to messages; your consent, for advertising cookies where consent is required; and legal obligation where the law requires us to process or keep information.

We do not sell your personal information. We share it only with:

• Service providers who host, deliver and secure the Service or handle email for us, acting on our instructions.
• Google, for advertising, as described in Cookies and advertising.
• Authorities or other parties when required by law, or when necessary to protect the rights, safety or property of our users, the public or us.
• A successor if the Service is involved in a merger, acquisition or sale of assets, subject to this policy.

News articles on the Service come from third-party publishers, and some images are loaded directly from those publishers’ servers, which means those servers receive your IP address when your browser loads them. Links such as “Read Full Story” take you to websites we do not control. Their privacy practices are governed by their own policies.

• Technical request logs are kept only as long as needed for security and operations, then deleted.
• API key holder details are kept while the key is active, and afterwards as a record of revoked keys for security purposes, unless you ask us to delete them.
• Emails are kept for as long as needed to deal with your enquiry.

The Service is served over HTTPS, API keys are stored only as one-way hashes, and access to production systems is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your API key confidential; if you believe it has been exposed, contact us so we can revoke it and issue a new one.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent at any time. Residents of the EU and UK can also complain to their local data protection authority.

California residents have the right to know what personal information we collect and how we use and disclose it, to request deletion or correction, and to opt out of the “sale” or “sharing” of personal information. We do not sell personal information. To opt out of personalised advertising, use the controls in Cookies and advertising. We will not discriminate against you for exercising these rights.

To make a request, email [email protected]. We may need to verify your identity before acting on it, and we will respond within the time required by applicable law.

Our service providers may process information in countries other than the one you live in, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers.

The Service is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will delete it.

We will update this policy when our practices change, for example if we add analytics, accounts or a contact form. The “Last updated” date at the top shows when it last changed. For significant changes affecting API key holders, we will also notify them by email.

Questions or requests about this policy: [email protected].