Legal

Privacy Policy

Last updated: September 11, 2026

This policy explains what personal data NationalReview collects when you browse, create an account, sign in, publish a review, or submit a business listing — who else processes it, how long we keep it, and how to get it deleted.

Information we collect

Account and sign-in data

Email address — used as your sign-in identifier, and to send one-time login codes and account notifications.
Name and, if you add one, a profile photo or avatar.
Contact number — optional, and only if you provide it for reviewer verification or owner contact.
Password — stored only as a one-way hash, and only for accounts that set one. Accounts created through Google, Facebook, or email codes have no password stored.
Role and account state — whether you are a normal user, business owner, or team member, and your verification status.

Third-party sign-in identities

Google. When you sign in with Google we receive your Google account identifier, email address, name, and profile picture, and store them against your account. We never receive your Google password.
Facebook. When you connect Facebook we may store your Facebook account ID, name, email, profile picture, profile link, the raw profile fields Facebook returns, and a screenshot of your Facebook profile that you upload as identity proof. We never receive your Facebook password.

Content you submit

Reviews, ratings, review titles and text, and any photos or video you attach to a review.
Owner replies to reviews, and business profile information submitted with a listing or claim — including your business name, address, phone number, website, category, description, and the Facebook proof screenshot uploaded to verify ownership.
Messages sent through the contact form, suggestions, reporting and appeal forms, and support requests.

Technical and anti-abuse data

Hashed IP address, device and browser signals, and submission timing — hashed so the raw address is not stored in the moderation record.
Content fingerprints, review revision history, and moderation decisions. See Moderation, evidence, and fraud prevention below.

Payments

If you buy an owner package we store the plan selected, payment reference, transaction status, entitlement, quota, and expiry date. We do not store full card numbers — card details are handled by the payment provider.

What is public

Business profile details, published reviews, ratings, owner replies, review media, and platform reviews are shown publicly on NationalReview pages.

Your name and avatar are shown next to a review you publish unless you have chosen a non-public profile. If your account is later deleted, the review stays visible but is attributed to “Deleted user” rather than to your name.

How we use information

We use your information to operate your account and sign you in; publish and rank business profiles and reviews; detect and remove spam, fake reviews, and abuse; verify business ownership and reviewer identity; process and administer paid owner packages; send you service and moderation notifications; provide support; and secure the platform.

We do not sell your personal data, and we do not use it for advertising profiling.

Cookies and third-party scripts

We keep this to the minimum the site needs to work.

What	Set by	Purpose / lifetime
Session cookie	NationalReview (first party)	Keeps you signed in and protects forms against cross-site request forgery. Expires when you sign out or the session lifetime elapses.
`XSRF-TOKEN`	NationalReview (first party)	Security token that lets our own pages submit forms safely. Not used for tracking.
Consent choice	NationalReview (stored in your browser's `localStorage`)	Remembers whether you accepted optional scripts. Deliberately not a cookie — we do not set a cookie in order to ask you about cookies.

There are no advertising, analytics, or tracking cookies on this site.

Two third-party services are used, and neither sets a cookie on its own:

Bunny Fonts (fonts.bunny.net) serves the typefaces. It is a cookie-free, GDPR-oriented font service.
Cloudflare provides the CDN, DDoS protection, and bot mitigation that sit in front of the site. Its script and logs are used for security only.

Google sign-in is loaded only when you ask for it. The Google Identity Services script (which sets Google cookies) is not loaded with the page. It loads when you click “Continue with Google”, or when you accept optional scripts in the cookie notice. If you only use email sign-in, Google's script is never loaded.

You can change or withdraw your choice at any time using Cookie settings in the footer of any page.

Who we share it with

We do not sell personal data. We share it only with the processors needed to run the service, and only as far as each one needs it:

Google — when you choose to sign in or sign up with Google.
Facebook — when you connect a Facebook identity.
Cloudflare — traffic delivery and security.
Bunny Fonts — typeface delivery.
Our email and payment providers — to send notifications and process owner package payments.
Authorities — where we are legally required to disclose, or where it is necessary to investigate fraud or abuse.

Moderation, evidence, and fraud prevention

For official platform reviews we retain restricted source references and internal evidence notes. We also process hashed IP addresses, device or browser signals, content fingerprints, submission timing, and review revision records to detect abuse, investigate disputes, and preserve platform integrity. Risk signals support human review and do not automatically establish wrongdoing.

Moderation records are visible only to authorized administrators.

How long we keep data

Data	Period
Account and personal profile data after you request deletion	30 days in a recycle bin, then permanently erased
Facebook proof screenshots on listings that were rejected	90 days after rejection, then the file is deleted
Moderation logs (including an administrator's free-text reason)	24 months, then deleted
Invoices, payment references, and transaction records	Kept for accounting and tax purposes, as required by law. These survive account deletion with the account link removed.
Published reviews	Kept for as long as the business listing is on the platform. Reviews survive account deletion but are no longer linked to you.
Backups	Encrypted or access-controlled backups may retain records for a short recovery window before rotating out.

Automated daily jobs enforce the 30-day, 90-day, and 24-month periods above.

Deleting your account and your data

You can delete your account yourself from Account settings → Delete account. You do not need to email us to do it.

What happens when you delete your account

Your account is deactivated immediately. You are signed out on every device and you can no longer sign in with that email address.
It is held in a recycle bin for 30 days. During that window your email address stays reserved — nobody else, including you, can register it.
After 30 days your account and its personal data — profile, contact number, connected Google and Facebook identities, uploads, notifications, and team memberships — are permanently erased, and the email address becomes available again.
Reviews you published stay visible, but are shown as “Deleted user” with no link to your account.
Business listings you own stay published and revert to unclaimed, so customers who reviewed the business do not lose their reviews.
Invoices and payment records are retained for accounting and tax purposes, with the link to your account removed.
Moderation logs referring to the account are retained for the 24-month period above, in de-identified form.

Changed your mind?

Contact support from the Contact page within the 30-day window and we can restore your account. After the purge runs it cannot be undone.

Data not tied to an account

If you submitted a business listing or a contact message without an account, see the Data Deletion Instructions for how to ask us to remove it.

Administrator accounts cannot be deleted from Account settings; they are removed by another administrator.

Your rights

Subject to applicable law, you can:

Access the personal data we hold about you.
Correct it — most profile fields are editable directly in Account settings; the sign-in email is changed by contacting support.
Delete it — self-service from Account settings, as described above.
Port it — ask us for a copy of your account data in a machine-readable format.
Object to or restrict certain processing, and withdraw cookie consent at any time via Cookie settings in the footer.

Send any of these requests through the Contact page. We may need to verify that the account is yours before acting.

Children

NationalReview is not intended for use by children. Accounts found to belong to a child below the age required by local law will be removed.

Data storage and protection

Application data is stored in the configured database and protected through authentication, admin permissions, server-side validation, encryption of the session cookie, and access controls. We limit administrative access to operational needs.

Changes to this policy

If we change how we handle personal data we will update this page and revise the date at the top. Material changes affecting your rights will be announced on the site.

Contact

For privacy questions or requests, use the Contact page or send a support message through the website. To delete your account, see Data Deletion Instructions or use Account settings → Delete account.

← Back to NationalReview