Your data,
handled with restraint.

Who is responsible

The controller is the Loseseat Team, operator of the Loseseat service. Privacy enquiries and requests to exercise data-protection rights can be sent to support@loseseat.com or submitted through the contact page.

Data you provide

• Account data: email address, username, account role, creation date and email-verification status.
• Private communications: messages exchanged with the Loseseat Team and any information or links included in them.
• Corrections and source suggestions: country, optional officeholder, explanation, source URL and review history.
• Account-management requests, including username changes, password recovery and security reports.

Data collected when you use the service

• Authentication and session data needed to keep you signed in and protect access to your account.
• Operational and security records, such as timestamps, failed requests and administrative actions, where available.
• Language preference, stored so the site can remember whether you selected English or Portuguese.

Loseseat currently uses essential session cookies and a language-preference cookie. It does not currently use advertising or behavioural-profiling cookies. If that changes, this notice and any legally required consent controls will be updated first.

Public-interest and editorial data

Loseseat also processes public professional information about heads of state, heads of government and ministers: names, offices, mandates, official photographs, institutional sources, news references, source history and review records. Individual news headlines and editorial assessments are kept in restricted review areas; public pages use verified institutional records and authorised aggregates. The information is used to document public office and analyse media coverage, not to infer the political opinions of account holders.

Purposes and legal bases

• Provide accounts, authentication, private messaging and requested support: performance of the service requested by you.
• Protect accounts, prevent abuse, troubleshoot failures and maintain audit records: Loseseat's legitimate interests in operating a safe and accountable service.
• Assess corrections, maintain source history and monitor public office and media coverage: legitimate interests in editorial accuracy, transparency and public-interest information.
• Comply with binding legal duties and respond to lawful requests: compliance with a legal obligation.
• Where Loseseat specifically asks for consent, you may withdraw it at any time without affecting earlier lawful processing.

Who receives data

Access is limited to authorised Loseseat reviewers and carefully selected technical providers that support authentication, data storage, email delivery, infrastructure and security on our behalf. They may only process data for the contracted service and under applicable data-protection obligations. Loseseat does not sell personal data. Data may also be disclosed where required by law or necessary to establish, exercise or defend legal claims.

If a provider processes data outside the European Economic Area, an applicable transfer mechanism, such as an adequacy decision or standard contractual clauses, will be used where required.

How long data is kept

• Account data is kept while the account is active and for a limited period afterwards where needed for security, disputes or legal duties.
• Authentication cookies may remain for up to 30 days; the language preference may remain for up to one year unless you clear it sooner.
• Messages, corrections and their audit history are kept for as long as needed to handle the request, demonstrate the review performed and protect the integrity of public records.
• Public-source and officeholder history may be retained while relevant to transparency, methodology and the historical record.

Retention is reviewed by category and may be extended where preservation is required by law, a dispute or a security investigation.

Automated analysis

Loseseat uses automated methods to propose associations, media tone and experimental continuity-risk signals concerning public officeholders. These proposals may be reviewed and corrected. They do not make decisions about account holders and do not produce legal or similarly significant effects for them.

Your data-protection rights

Depending on the circumstances, you may request access, rectification, erasure, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent where consent is used. These rights are not absolute: public-interest records, freedom of expression, legal duties and the rights of others may limit a request. We may ask for proportionate information to verify your identity.

Requests are free and will normally receive a response within one month. You may also lodge a complaint with the Portuguese Data Protection Authority (CNPD) or the authority in your country of residence.

Security

Loseseat applies proportionate technical and organisational measures, including access controls, protected authentication, role-based administrative access and audit records. No online service can guarantee absolute security. If you suspect unauthorised access, use the contact page promptly and do not include passwords in your message.

Changes to this notice

This notice will evolve with the service. Material changes will be reflected in the date above and, where appropriate, communicated through the account or email before they take effect.