Legal

Privacy Policy

Last updated: October 29, 2026

Who We Are

Gray List Global (graylist.global) is an independent analysis site covering illicit finance, sanctions, corruption, and transnational crime. This policy explains what information we collect from visitors and subscribers, how we use it, and the choices you have.

Information We Collect

Newsletter sign-ups. If you subscribe, we collect your email address and the date you signed up. Subscriptions are managed with MailPoet, and you confirm your subscription by email.
Messages you send us. If you contact us, we receive your name, email address, and anything you choose to include in your message.
Comments. If comments are enabled and you leave one, we collect the name, email address, and comment text you submit, plus your IP address and browser information to help detect spam. Comments may be checked by the Akismet spam filtering service.
Analytics. We use Google Analytics (through the MonsterInsights plugin) to understand how visitors use the site, such as which pages are read and how visitors arrive. This uses cookies and collects information like your approximate location, device, and browser.
Security and spam protection. Our security tools (Wordfence and our host’s firewall) log IP addresses and request details to block attacks. Our forms use Google reCAPTCHA to filter out automated spam.
Hosting logs. Our web host keeps standard server logs, including IP addresses and pages requested, for security and performance.

How We Use Information

To send newsletters and new-post notifications you asked to receive.
To reply to messages you send us.
To understand which content is useful and improve the site.
To protect the site from spam, abuse, and security threats.

We do not sell your personal information, and we do not use it for advertising.

Who We Share It With

We share information only with service providers that help us run the site, and only as needed for that purpose:

GoDaddy (website hosting and email)
MailPoet / Automattic (newsletter delivery)
Google (Analytics and reCAPTCHA)
Akismet / Automattic (comment spam filtering)
Wordfence / Defiant (website security)

We may also disclose information if required by law.

Cookies

The site uses cookies for analytics, security, and basic site functions. You can block or delete cookies in your browser settings; the site will still work, though some features may not.

How Long We Keep It

Subscriber information is kept until you unsubscribe. Messages are kept as long as needed to respond and for our records. Analytics data is retained according to Google Analytics settings. Security logs are kept for a limited period.

Your Choices and Rights

Unsubscribe at any time using the link at the bottom of every email.
Ask us to access, correct, or delete the personal information we hold about you.
Opt out of Google Analytics using Google’s browser add-on at tools.google.com/dlpage/gaoptout.

Visitors in the European Union and United Kingdom (GDPR)

If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR give you the following information and rights.

Who Is Responsible for Your Data

Gray List Global is the controller of personal data collected through this site. You can reach us at news@graylist.global. We have not appointed a data protection officer.

Why We Use Your Data and Our Legal Basis

Newsletter and new-post emails: your consent, which you give when you subscribe and confirm by email. You can withdraw consent at any time by unsubscribing.
Analytics cookies: your consent, where consent is required by law.
Replying to your messages: our legitimate interest in responding to people who contact us.
Security, spam prevention, and server logs: our legitimate interest in keeping the site safe and working.
Legal requests: compliance with a legal obligation, where applicable.

International Transfers

Gray List Global is based in the United States, and our service providers process data in the United States and other countries. When personal data is transferred outside the EEA or UK, we rely on the safeguards our providers put in place, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

Your Rights

You have the right to:

access the personal data we hold about you;
correct inaccurate data;
have your data deleted;
restrict or object to how we use your data;
receive your data in a portable format; and
withdraw your consent at any time, without affecting processing that happened before you withdrew.

To use any of these rights, email news@graylist.global. You also have the right to lodge a complaint with your local data protection authority.

Other Information

Providing your email address is optional and is only needed if you want to receive our emails. We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

California Residents (CCPA/CPRA)

This section describes how we handle personal information of California residents, as described in the California Consumer Privacy Act as amended by the California Privacy Rights Act.

Information We Collect

In the past 12 months we have collected the following categories of personal information:

Identifiers: name, email address, and IP address.
Internet or other electronic network activity: pages viewed, referring sites, and device and browser information.
Approximate geolocation: general location (such as city or country) inferred from your IP address.

We collect this information directly from you (for example, when you subscribe or email us) and automatically when you use the site. We use it for the purposes described in “How We Use Information” above, and we keep it for the periods described in “How Long We Keep It.” We do not collect sensitive personal information.

Disclosure, Sale, and Sharing

We disclose personal information only to the service providers listed in “Who We Share It With,” for business purposes such as hosting, email delivery, analytics, and security. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16.

Your California Privacy Rights

You have the right to:

Know what personal information we have collected about you, where it came from, why we collected it, and who we disclosed it to;
Delete personal information we collected from you, subject to certain exceptions;
Correct inaccurate personal information;
Opt out of the sale or sharing of your personal information (we do not sell or share it); and
Not be discriminated against for exercising any of these rights.

To make a request, email news@graylist.global. We will confirm receipt within 10 business days and respond within 45 days. We may need to verify your identity before acting on a request. You may also use an authorized agent to submit a request on your behalf; we may ask the agent for proof of authorization.

Children

This site is not directed to children under 13, and we do not knowingly collect their information.

Changes to This Policy

We may update this policy from time to time. The date at the top shows when it was last changed.

Contact

Questions about this policy or your information can be sent to news@graylist.global.