§How we handle your data
Privacy, in short.
We collect as little as the service requires. We don't sell data. We don't track you around the web. Your email gets our newsletter, nothing else.
Last updated April 13, 2026.
What we collect
We only collect information required to deliver the service you asked for.
Account data. Your email address, a username, and your subscription preferences (which editions you want, your industry, your role or profile type). If you subscribe to Premium, we store a Stripe reference so we can link your subscription to your account.
Sign-in data. We use OAuth providers (Google, LinkedIn, GitHub) for authentication. We do not store or manage passwords. When you sign in, we receive your email and basic profile info from the provider, along with OAuth tokens needed to verify your session.
Login history. For security auditing: successful and failed login attempts, the provider used, and an approximate IP and user-agent at the time.
Usage signals. Basic anonymised analytics (via Umami) covering pages viewed, referrer, and coarse location. Cookieless, no fingerprinting, no cross-site tracking, no advertising pixels.
Why we collect it
To deliver the service. Email address and preferences are the minimum required to send the newsletter you subscribed to.
To operate your account. Login history and account data keep your session secure and let you access Premium features you paid for.
To link you to your Premium subscription. If you go Premium, we store the Stripe customer reference so we can grant you access to paid features. Stripe handles the payment itself.
To improve the product. Aggregate, anonymised analytics help us see which articles resonate. No individual profile is ever built from this.
Who we share it with
We share data with a small number of service providers strictly necessary to operate the service. Each is bound by a data processing agreement.
A payment processor. For Premium billing. Card numbers, CVCs, and bank details are entered directly with the processor and never pass through or reach our systems. We only hold a reference ID linking your account to your subscription.
An email delivery provider. For transactional emails and newsletter dispatch.
A privacy-respecting analytics provider. For cookieless, aggregate usage analytics.
A cloud hosting provider. Hosting the application and database.
We do not sell, rent, or trade your personal data. We do not share your email or engagement data with advertisers, data brokers, or affiliate networks.
How long we keep it
Active accounts. For as long as your account is active or you remain subscribed to the newsletter.
After cancellation or deletion. We delete personal data within 30 days of account deletion, except where we're required to retain it for legal or accounting purposes (for example, invoice records for tax compliance, typically 7-10 years depending on jurisdiction).
Login history. Retained up to 12 months for security investigation, then deleted.
Your rights
Under GDPR and similar regulations, you have the right to:
Access. Request a copy of the personal data we hold about you.
Rectify. Ask us to correct inaccurate information.
Delete. Ask us to delete your data. You can do this yourself from your account settings, or by writing to us.
Port. Receive your data in a structured, machine-readable format.
Withdraw consent. Unsubscribe from any email with a single click. Close your account at any time.
Object or complain. Object to our processing, or lodge a complaint with your local data protection authority.
Cookies
We use strictly necessary cookies to keep you logged in and to remember basic preferences. Our analytics provider (Umami) is cookieless. We do not set advertising cookies, tracking pixels, or third-party cookies that follow you across the web.
International transfers
Our infrastructure providers may process data outside your home country. Where they do, standard contractual clauses or equivalent safeguards are in place to ensure the same level of protection as required by your local data protection law.
Changes to this policy
We may update this policy as the service evolves. Material changes will be communicated through the service. The “last updated” date at the top always reflects the current version.
Questions
Privacy matters more than legalese. If you have a question about how we handle your data, write to us via the submit page. A human reads everything.
End of document