Privacy Policy

Trooday is a fact-checking and information service. We publish checks of specific public claims, together with the verdict, confidence level, explanation, evidence and sources.

For any privacy question or request, contact jointrooday@gmail.com.

Reading Trooday does not require an account. If you create one, we collect:

• your account email address;
• the display name you provide;
• basic identity information from Google (name, email address and Google account identifier) if you choose to sign in with Google;
• the checks you save, and when you saved them;
• your individual “Was this check helpful?” response for a check, and when it was recorded;
• session and security information needed to keep you signed in and to protect accounts;
• the text of any request you send through “Ask Trooday”, together with your account identifier, the submission time and, if an administrator marks the request as completed, the completion time;
• anything you choose to send us by email.

Our infrastructure and hosting providers may also process technical records such as request and error logs as part of delivering the service.

• to create and maintain your account;
• to authenticate you and keep your session active;
• to show your Saved checks;
• to remember your helpfulness response for each check;
• to protect the service and investigate technical or security problems;
• to review “Ask Trooday” requests for possible editorial investigation;
• to respond to privacy requests and correction reports;
• in the future, to improve editorial clarity using aggregated or de-identified trends.

Your individual helpfulness responses are private. They are not shown publicly, not shown to other users and not displayed as public totals. Helpfulness feedback never changes a verdict.

When you send a request through “Ask Trooday”, the text you submit is stored with your account and can be read by Trooday administrators in a private editorial queue. Requests are not published, are not shown to other users and receive no automated answer.

Please do not include private, confidential or sensitive information in a request. Sending a request does not guarantee that a check will be investigated, published, or that you will receive a response.

Administrators can mark a request as completed or reopen it. If your account is deleted, your requests are deleted with it.

Google sign-in is optional. You can always use an email address and password instead.

When you choose it, Trooday requests only basic identity scopes: your name/profile and email address. Trooday does not request or receive access to Gmail, Google Drive, your contacts, your calendar or any other content in your Google account, and never receives your Google password.

Google sign-in is handled through Supabase Auth. Your use of your Google account also remains subject to Google’s own terms and privacy policy.

Your browser stores the information needed to keep your authenticated Supabase session active, so you stay signed in between visits. Clearing your browser storage signs you out. Your privacy choice is stored the same way.

Optional storage — remembering your appearance choice, keeping a local history of checks you opened on this device, and analytics — is off until you allow it, and can be withdrawn at any time.

The full list, with names, purposes and durations, is on the Cookies and storage page.

Trooday uses two analytics services, and only if you allow the Analytics category: Google Analytics 4 for anonymous page-view measurement, and Microsoft Clarity for privacy-masked session recordings and heatmaps. Until you allow it, neither script is loaded and no measurement cookie is set.

When allowed, Google Analytics measures anonymous usage only: page paths without query strings, referrer, approximate location, device and browser information. Advertising storage, ad user data, ad personalization and Google signals remain denied, so Trooday creates no advertising or remarketing audiences.

Microsoft Clarity records how public pages are used: clicks, scrolling, mouse movement, navigation between pages, general device and browser technical data, and a privacy-masked replay of the page. Text and form input are masked, and Clarity uses pseudonymous analytics identifiers rather than your name or account. Advertising storage stays denied, and Clarity runs only on public reading pages — never on Settings, Saved, sign-in, password recovery, Ask Trooday request content or administrative pages.

Trooday does not intentionally send your name, email address, password, account identifier, saved checks, helpfulness responses, Ask Trooday text or administrative content to Google or Microsoft. See Microsoft’s privacy statement for how Microsoft handles Clarity data.

Trooday uses no advertising cookies, marketing trackers, tag manager or social media pixels. Withdrawing Analytics through Cookie settings blocks further measurement, deletes the analytics cookies this site can reach and reloads the page you are on, which removes both runtimes.

Trooday relies on a small number of service providers, acting as processors on our behalf:

• Supabase — authentication, database and file storage;
• our website hosting provider — delivery of the website;
• Google — Google sign-in if you choose it, and Google Analytics only if you allow analytics;
• Microsoft — Microsoft Clarity session recordings and heatmaps, only if you allow analytics;
• email providers — only to deliver and receive email you send to us.

These are service providers, not partners or endorsers of Trooday’s editorial content.

Trooday does not sell personal information. We may disclose it only:

• to the service providers needed to operate the service;
• when required by applicable law or valid legal process;
• when reasonably necessary to protect the service, our rights or the safety of users.

Account information is generally retained while your account remains active. Saves and helpfulness responses stay associated with your account until you remove them or the account is deleted.

Limited records may be retained for longer where reasonably required for security, legal compliance or resolving a dispute.

We use reasonable safeguards, including Supabase access controls that restrict each account’s data to that account. No internet service can guarantee absolute security, and we do not claim any formal security or privacy certification.

• you can update appropriate profile information where that functionality is available;
• you can remove any save or helpfulness response directly in the app;
• you can request access to, correction of, or deletion of your account and associated data by emailing jointrooday@gmail.com.

Self-service account deletion is not implemented yet. Deletion requests are handled manually, so they are not immediate or automated.

Our service providers may store and process information outside your province, state or country. That information may be subject to the laws of the locations where it is processed.

Trooday is a general-interest information service intended for a general adult audience. It is not directed at young children, and we do not collect a date of birth or verify ages. If you believe a child has created an account, contact jointrooday@gmail.com and we will review it.

If this policy changes materially, we will update the page and revise the last-updated date above. Questions and requests can be sent to jointrooday@gmail.com.