Privacy Policy
CelebLedger is committed to transparent data practices, rigorous cybersecurity standards, and the protection of user privacy. This policy explains what information is processed when you visit our public reference portal, how it is utilized, and your legal rights under global privacy frameworks.
Foundational Privacy Architecture
CelebLedger is an open-access public reference archive and biographical journal. Unlike many digital publications, we do not require user account registration, subscription logins, credit card numbers, or passwords to read our biographies, filmographies, or financial analyses.
Our fundamental principle is data minimization: we process only the minimum technical telemetry necessary to deliver fast, secure, and reliable web pages to your browser, monitor site availability, and safeguard our infrastructure against distributed denial-of-service (DDoS) attacks and malicious automated data scrapers.
Categories of Information We Process
A. Technical Telemetry & Automated Server Logs
When you navigate through CelebLedger, our edge network (powered by Vercel and Cloudflare) automatically logs standard technical metadata transmitted by your browser. This includes your Internet Protocol (IP) address (truncated/pseudonymized for geographic region estimation), browser type and version, operating system, referring URL, pages viewed, time spent per dossier, and HTTP response codes. This telemetry is processed strictly for infrastructure health, bot mitigation, and Core Web Vitals optimization.
B. Direct Inquiries & Newsroom Correspondence
If you voluntarily submit an inquiry through our Contact Desk or email our fact-checking bureau, we collect your name, email address, organization affiliation, and any evidentiary documents you provide. This information is retained solely to investigate, verify, and resolve your editorial query or licensing agreement.
C. Information We Explicitly DO NOT Collect
CelebLedger never collects government identification numbers (Social Security numbers, national ID numbers), biometric data, health records, financial payment details, or precise GPS mobile geolocation. We do not engage in cross-site keystroke logging or covert behavioral profiling.
Lawful Basis for Processing Under GDPR & UK GDPR
For visitors residing within the European Economic Area (EEA) and the United Kingdom, our processing of personal data is anchored in the following lawful grounds established under Article 6 of the General Data Protection Regulation (GDPR):
- Legitimate Interests (Art. 6(1)(f)): To maintain network and information security, detect and prevent fraudulent bot traffic, optimize edge delivery performance, and publish biographical reference materials in the public interest.
- Consent (Art. 6(1)(a)): Where you explicitly grant permission through our cookie preference banner for non-essential analytical measurement cookies.
- Legal Obligations (Art. 6(1)(c)): To satisfy statutory compliance requirements, such as responding to lawful court orders, subpoenas, or statutory copyright notifications under the Digital Millennium Copyright Act.
Cookies, Analytics & Programmatic Advertising Standards
Cookies are small text files placed on your device to ensure web functionality and measure reader engagement. CelebLedger categorizes cookies as follows:
Required for security, load balancing, server routing, and Cloudflare anti-bot verification. These cookies do not store personally identifiable information and cannot be disabled.
Aggregate measurement tools (such as Vercel Web Analytics) that calculate page load speed, reader retention, and search queries without using persistent personal identifiers or cross-site tracking.
Third-Party Advertising Compliance: CelebLedger may display advertisements served through Google AdSense or certified programmatic partners. These partners adhere to Google Publisher Policies, the Interactive Advertising Bureau (IAB) Transparency and Consent Framework, and applicable consumer privacy regulations. Readers may manage personalized advertising preferences or opt out entirely via the Digital Advertising Alliance (DAA) and the Network Advertising Initiative (NAI).
California Consumer Privacy Rights (CCPA / CPRA & CalOPPA)
Under the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA), California residents are afforded specific statutory rights regarding their personal information:
- Right to Know & Access: The right to request disclosure of the specific categories of personal information collected, the sources of collection, the business purpose for processing, and third parties with whom data was shared over the past 12 months.
- Right to Deletion: The right to request the deletion of personal information collected directly from you, subject to statutory exceptions (such as legal compliance or completing a transaction).
- Right to Correction: The right to request rectification of inaccurate personal telemetry maintained in our records.
- Right to Opt-Out of Sale or Sharing: CelebLedger does not sell personal information for monetary compensation, nor do we share consumer information with data brokers.
- Right to Non-Discrimination: We do not deny services, adjust quality, or charge different rates based upon the exercise of your statutory privacy rights.
To exercise any of these California privacy rights, submit a verifiable consumer request to privacy@celebledger.com with the subject line “California Privacy Rights Request.”
European Data Subject Rights & The Journalistic Exemption
Readers located in the EU and UK possess the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict processing (Art. 18), and object to processing (Art. 21) regarding their personal telemetry data.
Biographical Profiles & Article 85 GDPR: Please note that biographical archives chronicling public figures, historical filmographies, and public interest economics are published pursuant to the statutory journalistic, academic, and literary exemption codified in Article 85 of the GDPR and Section 124 of the UK Data Protection Act 2018. While we welcome verifiable corrections of demonstrably false facts via our corrections desk, the “Right to be Forgotten” does not mandate the removal of historically accurate public interest journalism concerning notable public figures.
Data Retention & Cybersecurity Architecture
CelebLedger enforces stringent security protocols to protect all operational data against unauthorized access, disclosure, alteration, or destruction. Our technical posture includes:
- Transport Layer Security: Full TLS 1.3 / SSL encryption enforced across all domain endpoints with HTTP Strict Transport Security (HSTS) headers.
- Log Rotation & Scrubbing: Standard server access telemetry is pseudonymized and automatically rotated or purged within 30 to 90 days.
- Access Controls: Newsroom editorial correspondence and editorial ticketing queues are restricted through multi-factor authentication (MFA) and least-privilege role-based access controls (RBAC).
Children's Online Privacy Protection Act (COPPA)
CelebLedger is an informational publication intended for general audiences and film researchers. We do not knowingly solicit or collect personal information from children under the age of 13 (or under 16 in certain European jurisdictions). If we determine that a minor under 13 has transmitted personal data through our contact forms without verifiable parental consent, we will promptly delete that information from our active queues.
Contacting Our Data Protection Officer
If you have questions, comments, or statutory requests concerning this Privacy Policy or our information governance practices, please reach out to our appointed Data Protection Officer: