Privacy Policy

This Privacy Policy describes how facts.ng ("we", "our", "us") handles information collected through the Service, including the public website, the Contact Us form, and the public Developer API.

We aim to collect only what we need to operate and improve facts.ng, and to be clear about how that information is used.

We collect information in three ways:

1. Information you give us. When you submit the Contact Us form we collect the name, email address, subject, and message you provide so we can read and respond. If you create an account we collect a username, email address, and password (stored as a salted hash — we never see your plain-text password).

2. Information collected automatically. When you visit the site, our servers and basic logs record technical details such as your IP address, browser type and version, the pages you request, the time of your request, and a referring URL. This information helps us keep the Service secure and understand how it is used.

3. Cookies and local storage. We use a single first-party cookie to keep you signed in if you have an account. We do not set advertising or cross-site tracking cookies.

We use the information we collect to:

- operate, maintain, and improve facts.ng;
- respond to messages you send through the Contact Us form;
- detect, prevent, and respond to abuse, fraud, and security incidents;
- enforce our Terms of Use; and
- comply with legal obligations.

We do not use your information for automated decision-making that produces legal effects.

facts.ng uses a session cookie strictly necessary for authentication and CSRF protection. We may also use limited browser local storage to remember non-essential preferences (such as a dismissed banner).

We do not embed third-party advertising trackers. Some pages may embed media or content from third parties (for example, news source links you click) which may set their own cookies on those external sites — please review their policies for details.

We do not sell your personal information.

We may share information only in these limited circumstances:

- with service providers who host or operate parts of the Service on our behalf, under contracts that require them to protect your information;
- when we believe in good faith that disclosure is required to comply with a law, regulation, legal process, or enforceable governmental request;
- to protect the rights, property, or safety of facts.ng, our users, or the public; and
- in connection with a merger, acquisition, or sale of assets, in which case we will provide notice before your information becomes subject to a different privacy policy.

We keep different types of information for different periods:

- Contact Us submissions are retained for up to 60 days and then automatically deleted, unless we need to keep a thread for an ongoing conversation or to resolve a complaint.
- Account data is retained for as long as your account is active. If you ask us to delete your account, we will remove or anonymise your account data within a reasonable period, except where we are required to retain it by law.
- Server and security logs are retained for a limited period (typically 30–90 days) and then rotated.

We use reasonable administrative, technical, and physical safeguards designed to protect information from unauthorised access, alteration, disclosure, or destruction. This includes encryption in transit (HTTPS), salted password hashing, and access controls on our internal tools.

No method of transmission over the internet or electronic storage is completely secure, however, and we cannot guarantee absolute security.

Subject to applicable law, you have the right to ask us to:

- confirm whether we hold information about you and provide a copy;
- correct information that is inaccurate or incomplete;
- delete information we no longer need to keep;
- restrict or object to certain uses of your information.

You can exercise these rights by contacting us through the Contact Us page. We may need to verify your identity before acting on a request.

facts.ng is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

facts.ng is operated from Nigeria, and information we collect may be processed and stored on servers in Nigeria or other countries where our service providers operate. Where required by law we take appropriate steps to ensure that your information receives an adequate level of protection wherever it is processed.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where the changes are material, take additional steps to notify users (for example, a notice on the site). Continued use of the Service after a change indicates acceptance of the revised policy.

Questions or requests about this policy? Please reach out through our Contact Us page and we will respond as quickly as we can.