Trust

Trust, security & privacy

This page is maintained by the Q15 team to answer common security and privacy questions about q15.dev. It describes app-visible controls and current practices. It is not a certification or an independent audit.

What Q15 is

Q15 is a public technology news site. Articles, news pulses, cover images, and polls are intended to be readable by anyone without signing in. There are no user accounts for readers.

Access & authentication

Reading the site requires no account. Editor access (publishing articles, managing pulses, site settings) is gated by an admin-only role stored in a dedicated roles table and enforced on the backend for every write.

Admin sign-in uses email and password authentication provided by our backend platform.

Data we collect

From visitors: nothing beyond standard request logs needed to serve the site. Polls and reactions are recorded anonymously (poll votes use a non-identifying voter hash to prevent duplicates).

From newsletter subscribers: only the email address you submit. Subscriber emails are readable only by site admins.

Storage & content

Article cover images, generated pulse images, and article audio are stored in public buckets because they are part of the published content. Uploads, updates, and deletions in those buckets are restricted to admins.

Third-party services

Q15 uses a managed backend platform for database, authentication, and storage; an AI gateway for headline summarisation; and ElevenLabs for optional article audio. We do not sell your data to third parties.

Cookies & analytics

Q15 does not set advertising or cross-site tracking cookies on the public site. The editor area uses a session cookie for sign-in.

Retention & deletion

Older news pulses are pruned automatically to keep the dataset small. Subscribers can request removal of their email at any time via the contact below.

Security contact

To report a security issue or request data removal, contact the site owner through the editor address on q15.dev. We aim to acknowledge security reports promptly.

Q15 runs on the Lovable platform. Platform-level capabilities such as managed authentication, row-level access controls, and encrypted secret storage are provided by Lovable; how those capabilities are configured for this app is the responsibility of the Q15 team. Nothing on this page should be read as a certification or as legal advice.