Compliance overview

How IndoPac handles privacy, audience measurement, accessibility, and Daily Brief subscriptions.

EU and EEA readers

IndoPac provides a clear privacy notice, explains its legal bases and storage practices, limits non-essential tracking, and records newsletter consent. The Daily Brief uses double confirmation. Optional reader accounts store only the profile and preference data needed for the features a reader chooses; IndoPac does not use ad tech or broader profiling.

GA4 is enabled for audience measurement. If IndoPac adds non-essential cookies or collects more personal data, it will review consent and request handling before launch.

U.S. readers

IndoPac explains what it collects, whether information is sold or shared, whether the service is for children, and how the public site approaches accessibility.

IndoPac does not sell or share data for behavioral ads. It has no child-directed features or paywall identity layer. Reader accounts are optional, private by default, and include self-service profile, preference, export, and deletion controls. Daily emails identify sources and include a direct unsubscribe link.

Accessibility

Accessibility is part of IndoPac's compliance work, not only a design choice. The site maintains a separate accessibility statement and uses recognized guidance such as WCAG.

Current operating model

• IndoPac remains readable without an account, paywall, payment profile, or public comment history.
• An optional reader account can hold an email address, profile details, email choices, and reading preferences.
• Amazon Cognito manages sign-in credentials. Account profiles and preferences are stored separately in DynamoDB.
• Profile photos are optional, kept in private object storage, and made available only through time-limited signed access.
• Email consent is granular: readers can choose products, cadence, and coverage, pause delivery, or unsubscribe.
• Google Analytics 4 measures site use. Advertising storage, Google signals, personalization, and behavioral profiling stay off.
• Readers can turn analytics off in the footer. Global Privacy Control is also honored.
• The public-profile preference is off by default, and this release exposes no public profile endpoint.
• IndoPac does not sell personal information or use it for targeted advertising.

Changes that require another review

Publishing reader profiles or launching paid subscriptions or membership
Adding contribution forms or user-generated content
Adding analytics, ad tech, or third-party embeds that store non-essential identifiers
Collecting direct reader correspondence or other personal submissions at scale
Offering paid products, membership, or commerce flows