1. Who We Are

The Convergence Report is an entertainment industry intelligence service operated by Jon Stahl. If you have questions about this policy or your data, contact us at jon@mediaconvergencereport.com.

2. What Data We Collect

• Account data: Email address and name (provided during registration or via Google sign-in).
• Usage data: Pages visited and features used, collected via PostHog analytics (only with your consent).
• Feedback: Messages and ratings you voluntarily submit through the feedback form.
• Preferences: Saved views, email digest subscriptions, and display settings.
• Authentication tokens: Session cookies required for sign-in functionality.

3. Why We Collect It (Legal Basis)

• Account & preference data: Necessary to provide the service (contract performance, GDPR Art. 6(1)(b)).
• Analytics: Based on your consent via the cookie banner (GDPR Art. 6(1)(a)). You can decline or withdraw consent at any time.
• Feedback: Based on your consent when you choose to submit it.

4. Cookies & Analytics

We use one essential cookie for authentication (session management). This cookie is strictly necessary and does not require consent.

We use PostHog for analytics. PostHog cookies are only set if you click “Accept” on the cookie banner. You can change your preference at any time by clearing your browser cookies and refreshing the page.

5. Third-Party Processors

We use the following services to operate The Convergence Report. Each processes data on our behalf under a Data Processing Agreement:

• Vercel (USA) — Hosting and serverless functions
• Neon (USA) — Database (stores account data, preferences)
• PostHog (USA) — Analytics (only with consent)
• Resend (USA) — Email delivery for digest notifications
• Google (USA) — OAuth authentication
• Upstash (USA) — Rate limiting infrastructure

International transfers to the USA are covered by the EU-US Data Privacy Framework and/or Standard Contractual Clauses included in each processor's DPA.

6. Data Retention

• Account data: Retained until you delete your account.
• Analytics data: Retained per PostHog's default retention period (configurable).
• Feedback: Retained indefinitely in anonymized form after account deletion.

7. Your Rights (GDPR / UK GDPR)

If you are in the EU or UK, you have the following rights:

• Access: Request a copy of your data (available via Settings → Export My Data).
• Rectification: Update your account information.
• Erasure: Delete your account and all associated data (available via Settings → Delete Account).
• Portability: Export your data in a machine-readable format (JSON).
• Object: Withdraw analytics consent at any time.

To exercise any of these rights, use the self-service tools in Settings or contact us at jon@mediaconvergencereport.com.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. The “last updated” date at the top reflects the most recent revision.