Privacy Policy

Last updated: September 26, 2026

Apex (“we”, “us”) operates apex-nepal.com. We respect your privacy and comply with GDPR, CCPA, and Qatar PDPL principles.

1. Data we collect

Account data: name, email, avatar, bio, professional role – when you create an author account.
Content data: articles, comments, claps, bookmarks you submit.
Reading counts: aggregate per-article pageview counters stored in our own database.
Site analytics (cookieless): we use Vercel Web Analytics and Vercel Speed Insights to see which pages are read and how fast they load. These do not use cookies, do not store an identifier on your device, and do not track you across other websites. What is recorded is: the page URL, referrer, country, and coarse device/browser type, plus page-speed timings. Vercel derives a temporary, daily-rotating hash (from your IP address, user agent, and the page) purely to count a visit once — it is not stored, not reversible, and cannot be used to identify you. Your full IP address is never retained by us.
Cookies: essential session cookies (Supabase auth) and preference cookies (theme, cookie choice) only. Our analytics sets no cookies, which is exactly why we chose it.
Contact form: name, email, message – only to reply.

2. How we use it

Publish your bylined articles.
Improve site performance and Core Web Vitals.
Detect abuse / spam.
Reply to your inquiries.

We do not sell personal data. Ever.

3. Legal bases (GDPR)

Legitimate interest (aggregate, cookieless audience measurement; security and anti-spam), Contract (publishing your account), Consent (anything optional we may add later).

4. Cookies & consent

We show a cookie banner to all visitors. Essential cookies always run. Our analytics is cookieless and collects no personal data, so it runs for everyone — declining does not change what is collected, because nothing identifying is collected either way. You can revisit or withdraw your cookie choice at any time via the footer “Cookie settings” link or in your browser settings, and you can block analytics entirely with any tracker blocker or by enabling Do Not Track.

5. Third parties

Supabase (US/EU) – authentication & database
Vercel – hosting / CDN
Vercel Web Analytics & Speed Insights (served first-party from this domain) – cookieless traffic and performance measurement

6. Data retention

Account data: until you delete your account. Aggregate analytics: up to 12 months, and it is aggregate only — there is no personal record to delete. Contact emails: 12 months.

7. Your rights

Access, rectify, erase, export, restrict, object. Email legal@apex-nepal.com. We respond within 30 days.

8. Children

Apex is not directed to children under 16.

9. International transfers

Data may be processed in the US / EU with Standard Contractual Clauses.

10. Changes

We will post updates here with a new “last updated” date.

Contact: Apex, Doha, Qatar — legal@apex-nepal.com