Privacy policy

This privacy policy explains what personal data we collect when you use Panen77 News (panen77.news), what we use it for, who we share it with, how long we keep it, and what your rights are. It is based on Indonesia's Law No. 27 of 2022 on Personal Data Protection (the PDP Law).

Summary

You can read the entire site without signing up or logging in.
We measure visits with Cloudflare Web Analytics (no cookies) and Google Analytics. Google Analytics sets analytics cookies, except for visitors from the European Economic Area, the United Kingdom, and Switzerland. We do not use advertising cookies.
We only ask for personal data when you post a comment or subscribe to the newsletter.
Your email address is never displayed, sold, or used for advertising.
Server logs containing IP addresses are kept for no more than 14 days.
You can ask to access, correct, or delete your data at any time.

Who we are

The controller of personal data on this site is Panen77 News, the operator of panen77.news ("we" or "us"), located at Jl. Batan No.36, Pisangan, Kec. Ciputat Tim., Kota Tangerang Selatan, Banten 15419, Indonesia. How to contact us is described under Contact us at the end of this page.

Scope

This policy applies to every page of panen77.news in Indonesian and English, including the comment form, the newsletter form, the RSS feeds, and the services for machines and AI assistants (llms.txt, Markdown versions of pages, and the MCP server). It does not apply to third-party sites, apps, or services that we link to.

Data we collect

Data you give us

Comments. When you post a comment, you provide your name, email address, website address (optional), and the comment itself. At the same time, we record your IP address, browser information (user agent), the time of posting, the article you commented on, and the page language. Once approved by moderation, your name, comment, time, and website (as a link on your name) are shown publicly. Your email address, IP address, and browser information are never shown.

Newsletter. When you subscribe through the form at the bottom of each page, you provide your email address. We also record the page language, where you signed up, your IP address, and your subscription status and dates, including when you unsubscribe.

Messages to us. If you contact us, for example by email or through a message on social media, we receive your name or account name, your email address or other contact details, and the content of your message.

Data recorded automatically

Server logs. Like almost every website, our server logs each request: IP address, date and time, the address of the page requested (including any search terms in the address), status code, response size, referring page (referrer), browser information (user agent), response time, and the Cloudflare request ID. Requests from apps and AI agents, such as to the RSS feeds, llms.txt, or the MCP server, are logged the same way. Logs are rotated daily and kept for no more than 14 days.

Rate limiting. To prevent spam and abuse, your IP address is held briefly in server memory to limit the number of comments, newsletter sign-ups, football data searches, and promotion clicks within a 10-minute window. This data is never written to the database and expires on its own.

Promotion clicks. When you click a promotion (labeled "Promotion"), we record which promotion was clicked, its position, the page language, and the address of the page where it appeared. This record contains no IP address or any other identifier that could identify you, and it is only used to measure how promotions perform.

Data we do not collect

We do not offer reader accounts, so no passwords or profiles are stored.
We do not process payments.
We do not collect your precise (GPS) location.
We do not ask for specific personal data as defined by the PDP Law, such as health, biometric, genetic, criminal record, child, or personal financial data. Please do not post that kind of information, or anyone else's personal data, in the comments.

Cookies and browser storage

This site does not set login cookies, language cookies, or advertising cookies. The only things that may be stored in your browser are the following:

Google Analytics cookies _ga and _ga_XDLLXWSZX3. Distinguish visitors and visits for site statistics. Kept for up to 2 years. They are only set after your first interaction with the page, such as moving the mouse, scrolling, touching the screen, or pressing a key, and never for visitors from the European Economic Area, the United Kingdom, and Switzerland. See Analytics and advertising.
promo-seen-<number> in sessionStorage. Records that a promotional pop-up has been shown so it does not appear again during your visit. Kept until the tab or browser is closed.
promo-seen-<number> in localStorage. Records when a promotional pop-up was shown so it appears at most once a day or only once, depending on the promotion's settings. Kept until you clear the site's data in your browser.

The promotion markers stay on your device and are never sent to our server, while the Google Analytics cookies are sent to Google along with visit data. All of them can be deleted at any time in your browser settings.

Cloudflare, our network and security provider, may set strictly necessary security cookies (for example __cf_bm or cf_clearance) when it needs to filter automated traffic or attacks. These cookies are not used for advertising or to track you across other sites.

Analytics and advertising

We use two analytics tools to understand how the site is used and to improve it:

Cloudflare Web Analytics. Measures page views, referring pages, browser and device types, countries, and page speed in aggregate. It sets no cookies, stores no markers in your browser, and builds no visitor profiles. Its data is sent to Cloudflare through an address on our own domain (/cdn-cgi/rum).
Google Analytics 4 from Google LLC. Records the pages you view, where your visit came from, your approximate location (city or country), device and browser type, language, and interactions such as scrolling, clicking outbound links, and searching the site. Google Analytics does not log or store your IP address. Its script only loads after your first interaction with the page. For visitors from the European Economic Area, the United Kingdom, and Switzerland, Google Analytics runs without cookies and without visitor identifiers. We do not enable Google Analytics advertising features, such as Google signals, and do not link it to any advertising account. Visit-level data is kept for no more than 14 months.

How Google uses data from sites that use its services is explained on this Google page. You can opt out of Google Analytics on all sites with Google's browser add-on, or by blocking cookies and tracking scripts in your browser settings or extensions.

We do not use third-party advertising, Google Tag Manager, or Google AdSense. If we enable any of them in the future, we will update this policy first, list the cookies involved, and ask for your consent where the law requires it.

Third-party content and services

Logos and photos from our sports data provider. Some club logos, league logos, and player photos are loaded directly from API-Football's servers (media.api-sports.io). As with any image loaded from another site, your browser sends your IP address, browser information, and the referring page address to that provider. All other images are served through our own server and CDN.
Fonts. The site's fonts are hosted on our own server, so your browser does not contact Google Fonts.
Share buttons. The buttons for sharing an article to X, Facebook, WhatsApp, and Telegram are plain links. No social media scripts load until you click one; once you are on that service, its privacy policy applies.
Promotions and outbound links. When you click a promotion or a link to another site, you leave Panen77 News. We are not responsible for the privacy practices of the destination site.
Our social media accounts. Your interactions with Panen77 News accounts on Facebook, X, or Telegram are governed by those platforms' privacy policies.

Purposes and legal bases

Purpose	Data	Legal basis
Displaying and moderating comments, and contacting you about a comment if needed	Name, email, website, comment, IP, browser information	Your consent when you post; legitimate interest in preventing spam and abuse
Sending and managing the newsletter	Email, language, subscription status	Your consent, which you can withdraw at any time by unsubscribing
Keeping the site secure and reliable	Server logs, IP	Legitimate interest
Measuring promotion performance	Click records with no identifiers	Legitimate interest
Measuring and improving the site (visit statistics)	Aggregate visit data (Cloudflare Web Analytics); cookies, device data, approximate location, and interactions (Google Analytics)	Legitimate interest
Responding to your messages and requests, including requests about your data rights	Data in your message	Your consent; compliance with legal obligations
Meeting legal obligations, such as official requests from law enforcement	Data lawfully requested	Compliance with legal obligations

We do not sell personal data, do not use it for targeted advertising, and do not make decisions based solely on automated processing that have legal or similarly significant effects on you. The automatic rule for comments only checks whether the article accepts comments and whether automatic approval is turned on; otherwise, comments are moderated by the site's editors.

Who we share data with

We only share personal data with parties that help us run this site, and only as much as they need:

Cloudflare, Inc. for content delivery (CDN), DNS, security protection, media storage, and visit statistics (Cloudflare Web Analytics). Every request to the site passes through Cloudflare's network.
UpCloud as the provider of the servers that run our site and database, in a data center in Singapore.
Google LLC as our email service provider (Google Workspace) and for visit statistics (Google Analytics). Emails you send to support@panen77.news are received and stored on that service.
Email service providers. If we use a third-party service to send the newsletter, subscribers' email addresses are processed by that provider on our behalf.
Competent authorities, when required by law or a court order.
Business successors. If Panen77 News is merged, acquired, or transferred, data may pass to the successor, who must keep protecting it under this policy.

Beyond that, and apart from the image requests to our sports data provider described above, we do not share personal data with advertisers, data brokers, or anyone else.

International data transfers

Our servers are located in Singapore, Cloudflare's network operates in many countries, and Google's email and analytics services process data in various countries, including the United States. As a result, your personal data may be processed outside Indonesia. We choose providers that apply adequate security and data protection standards, in line with the PDP Law's rules on cross-border transfers.

How long we keep data

Data	Retention
Comments, with the email, IP, and browser information sent with them	As long as the comment is stored on the site, or until you ask us to delete it
Newsletter subscriber data	Until you unsubscribe or ask us to delete it. After you unsubscribe, your email may be kept with an "unsubscribed" status so that you are not emailed again, unless you ask for full deletion
Server logs	No more than 14 days
Rate-limiting data in memory	About 10 minutes
Promotion click records (no identifiers)	As long as needed for promotion statistics
Google Analytics visit-level data	No more than 14 months
Cloudflare Web Analytics statistics (aggregate, no identifiers)	As long as needed for site statistics
Messages to us	As long as needed to follow up on the message
Database backups	Made daily and kept for 7 days, so deleted data disappears from backups within 7 days

Data security

All connections to the site are encrypted with HTTPS.
The server is protected by Cloudflare's security network and a firewall that only opens the access that is needed.
The database cannot be reached directly from the internet, and the content management system can only be used by authorized staff, with authentication and role-based access.
The site's public interface only reads data that is meant to be displayed; commenters' emails, IP addresses, and browser information are never read by it.
The database is backed up daily.

No system is completely secure. If a personal data breach affects your data, we will notify you and the competent authority in writing within 3 x 24 hours, as required by the PDP Law.

Your rights

Under the PDP Law, you have the right to:

Get information about who we are, the legal basis, and the purpose of processing your data.
Access and obtain a copy of your personal data.
Complete, update, or correct data that is wrong or inaccurate.
Stop the processing of your data and have it deleted or destroyed.
Withdraw any consent you have given, for example by unsubscribing from the newsletter.
Object to decisions based solely on automated processing.
Postpone or restrict the processing of your data.
Obtain and use your data in a commonly used, machine-readable format.
Sue and receive compensation for violations in the processing of your personal data.

How to make a request. Email support@panen77.news with the subject "Personal Data", or contact us through the other channels under Contact us. Tell us what you are asking for and which data it concerns, for example the name and email you used when commenting. To protect your data, we may ask you to prove that the data belongs to you. We act on requests to access or correct data within 3 x 24 hours after verification, as required by the PDP Law, and handle other requests as quickly as possible. We may refuse or limit a request where the law allows, for example when the data is needed for legal proceedings, and we will tell you why.

Complaints. If you believe the processing of your data violates the PDP Law, you can file a complaint with the competent personal data protection authority in Indonesia.

Children

This site is intended for a general audience. We do not knowingly collect personal data from children under 18 without the consent of a parent or guardian. If you are under 18, please get your parent's or guardian's consent before posting a comment or subscribing to the newsletter. If we learn that a child's data was collected without that consent, we will delete it. Parents or guardians can also contact us to ask for deletion.

Visitors outside Indonesia

We manage data under Indonesian law. If you are in the European Union, the European Economic Area, or the United Kingdom, you also have rights under the GDPR, including the rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to the data protection supervisory authority in your country. The legal bases we rely on are consent (comments and the newsletter) and legitimate interests (security, server logs, and visit statistics). For visitors from these regions and Switzerland, Google Analytics runs without cookies. You can make requests through the same channels.

Changes to this policy

We may update this privacy policy, for example when we add new features or services. The date of the latest update is shown at the bottom of this page. If a change significantly affects how we process your data, we will announce it on this site before it takes effect.

Latest change (2 November 2026): added Google Analytics 4 and corrected the description of Cloudflare Web Analytics, which was previously stated, incorrectly, as not in use.

Contact us

Questions, requests about your personal data, or complaints can be sent to:

Panen77 News
Jl. Batan No.36, Pisangan, Kec. Ciputat Tim., Kota Tangerang Selatan, Banten 15419, Indonesia

See also Contact, About us, and Terms and conditions.

Last updated: 2 November 2026.