PRIVACY & DATA HANDLING

When you subscribe to Anchorage Press or update your home delivery address on /account:

• Cryptographic Access Guard: Reader delivery addresses, phone numbers, and courier instructions are locked behind cryptographic Ghost member session tokens. Unauthenticated users cannot query, enumerate, or modify another subscriber's delivery information.
• Encryption at Rest: Address blocks stored in member records are encrypted using AES-256-GCM cryptography. Only authorized circulation staff can decrypt postal routes for dispatching monthly print issues.
• Strictly Need-to-Know: Delivery coordinates are shared solely with local postal and carrier delivery drivers for the physical distribution of print editions across Southcentral Alaska.
• Right to Deletion: If you cancel your print membership, you can request immediate purging of your mailing address and courier notes by contacting circulation@anchoragepress.com.

All financial transactions for Anchorage Press memberships, recurring contributions, and paid event registrations are processed through certified, PCI-DSS Level 1 compliant processors (primarily Stripe and Givebutter).

• Zero Payment Storage: Anchorage Press web servers, Cloudflare edge functions, and Ghost databases never see, transmit, or store full credit card numbers, CVVs, or bank credentials.
• Stripe Portal: Billing modifications, payment receipt downloads, and card updates occur securely via direct tokenized Stripe sessions accessible from your Member Portal.

Independent investigative journalism requires protecting sources. We clearly distinguish between ordinary newsroom leads and sensitive whistleblower disclosures:

When readers submit calendar events, advertising inquiries, dish nominations, or personal queries to the Love & Sex Advice Column:

• Love & Sex Submissions: Real names and contact information submitted to the advice column are strictly confidential to editorial staff. Published inquiries are always anonymized under pseudonyms. Identifying personal details, workplace references, or locations are redacted before publication.
• Anti-Abuse Controls: Public forms are shielded by sliding-window rate limiting, bot honeypots, input sanitization, and Cloudflare Turnstile bot verification to prevent automated spam and injection attacks.
• Data Retention for Submissions: Unused event submissions and rejected op-eds are purged from operational review queues on a 90-day rolling cycle.

Anchorage Press operates on modern, lightweight infrastructure:

• Local Advertising (Broadstreet): Our local business ads run through Broadstreet Ads. Broadstreet prioritizes privacy: it does not engage in cross-site behavioral tracking or profiling across unrelated publisher domains.
• Content Security Policy (CSP): Our production headers enforce a strict Content Security Policy, preventing unauthorized external scripts from executing or exfiltrating data from the site origin.
• Aggregated Analytics: We use standard privacy-respecting analytics to gauge article popularity and site performance. We honor Global Privacy Control (GPC) and Do Not Track (DNT) browser signals.