The Guardian - US & World News

"Your geolocation data - your IP address can be used to find information about the latitude, longitude, altitude of your device, its direction of travel, your GPS data and data about connection with local Wi-Fi equipment."

The Guardian collects granular location data including GPS coordinates, device altitude, direction of travel, and WiFi connection data, which goes well beyond what a news publication requires for core functionality.

"We will match your unique ID number to your browsing behaviour to recognise you on a new device or through a different application such as the Guardian app on mobile devices. Details of your computer, mobile, TV, tablet or other devices, for example, the unique device ID, mobile advertising ID, unique vendor or advertising ID and browsers used to access our content."

The Guardian links user activity across multiple devices and applications using unique IDs, device identifiers, and advertising IDs to build a unified profile of each user.

"We may also share your personal data collected through our sites with our advertising partners, as set out in our cookie policy. These partners help us deliver relevant advertising across our sites. These partners may also generate their own identifier from your device or email address for the purpose of personalised advertising."

User data is shared with a broad network of third parties including LiveRamp, ID5, Lotame, The Trade Desk, Criteo, Permutive, mParticle, Google, YouTube, and others — many of which generate their own persistent identifiers from user data.

"When you use the Guardian app, we will ask for permissions to access particular functions of your mobile device. If you decide to submit content, such as photographs, to the Guardian. We will ask permission to access your camera or photographs. Details of your computer, mobile, TV, tablet or other devices, for example, the unique device ID, mobile advertising ID, unique vendor or advertising ID."

The Guardian collects device-level data including unique device IDs, advertising IDs, and requests access to camera and photo libraries — extensive device fingerprinting for a news app.

"If we decide to change our privacy policy, the updated privacy policy will be posted on this page. If the changes are significant, we may also choose to email all our registered users with the new details. If required by law, we will get your permission or give you the opportunity to opt out of any new uses of your data."

Changes are posted on the page with no guarantee of direct notification — emailing users is discretionary ("may also choose to"), and obtaining consent is only done "if required by law," meaning most changes take effect without explicit user agreement.

"We keep your personal data for only as long as we need to. How long we need your personal data depends on what we are using it for, as set out in this privacy policy. For example, we may need to use it to answer your queries about a product or service and as a result may keep your personal data while you are still using our product or service."

The policy provides no concrete retention timelines, using vague language like "as long as we need to" with no specific deletion schedules, leaving data retention effectively open-ended.