01 · Independence
Reader activity is not an editorial signal.
Reader membership exists to help people keep and revisit published work. Saving a place, creating a list, opening an email or subscribing to a brief does not count as a vote, nomination, inspection result or expression of editorial support.
Reader data is not used to determine The World’s Best Verify status, eligibility for an annual ranking, rank position, directory inclusion, editorial coverage or the timing of a publication decision.
- No paid reader tier creates influence or preferential access to a decision.
- Property representatives, partners and advertisers cannot use reader accounts to alter a public record.
- Aggregate engagement may inform product usability, never the substance of a verification or ranking decision.
02 · Private by default
Saves and lists belong to the reader.
Saved items and lists are private by default. The account records only the information needed to identify the reader, preserve their collection, honour email choices, secure sessions and maintain an accountable operational record.
A temporary save intention may remain on the reader’s own device until sign-in is completed. The durable collection is then stored in the same protected account database as the rest of the membership record.
- Passwords are protected with salted, deliberately slow cryptographic hashes and are never stored as readable text.
- Email addresses are normalised and verification and password-reset tokens are stored only as hashes.
- Reader and operational responses are marked private and are excluded from public caches.
- Readers can request access, correction, export or deletion of their personal record.
03 · Email consent
Membership and marketing consent remain separate.
Creating an account does not require a newsletter subscription. Optional email purposes are presented independently and can be changed in the reader account. Newsletter registration begins only after a confirmation link has been used.
Essential sign-in and security messages are service communications. Editorial briefs, edition notices, saved-list reminders, destination updates and product news are separate choices.
- Every subscription records its source, consent version and confirmation status.
- A reader can pause optional messages without losing saved places or lists.
- Delivery failures and provider responses are visible to authorised operations staff.
- Every designed email links back to preferences, privacy and this standard.
04 · Security
Short-lived links, bounded sessions and restricted operations.
Email verification happens once during registration. The verification link completes registration and signs the reader in automatically. Later access uses the verified email address and password; forgotten passwords use a separate single-use link.
The audience desk is part of the existing Operations system and remains behind the same restricted access controls. It is not a separate public administration panel.
- Repeated registration, sign-in and password-reset attempts are rate-limited.
- Suspending an account revokes its active sessions.
- Private account, order, operations and verification actions are never stored in the public page cache.
- Material account actions create a dated audit record.
05 · Accountability
A visible operational record supports every promise.
Authorised staff can see membership totals, pending confirmations, save and list activity, subscription state, email delivery status and audit events in one Audience module inside Operations.
The dashboard separates content engagement from editorial decision systems and makes failed mail visible. This prevents a successful on-screen form from concealing an undelivered sign-in or confirmation email.
06 · Reader rights
Control remains with the account holder.
A reader may change optional email choices, remove saved items, sign out active sessions, correct their details, or request a portable copy or deletion of their account data. Legal, security and fraud-prevention records may be retained only where there is a lawful and proportionate reason.
Questions and privacy requests may be sent to privacy@theworlds.best. Material changes to this standard will be dated here rather than applied silently.