Privacy Policy

1. Data Controller

2. Data We Process

To operate the newsletter service, we process only data required to deliver and improve the product:

• Email address
• Selected topic, language, and optional natural-language interest text
• Technical usage data (browser, timestamps, shortened IP in server logs)
• Newsletter delivery events (delivery, bounces, and clicks)

3. Purposes and Legal Bases (Art. 6 GDPR)

• Contract performance (Art. 6(1)(b)): delivery of the subscribed newsletter and account management actions.
• Legal obligations (Art. 6(1)(c)): retention of accounting and tax-relevant records.
• Legitimate interests (Art. 6(1)(f)): IT security, abuse prevention, service reliability, and troubleshooting.

4. Payments and Processors

We share data only when necessary for service delivery:

• Stripe Payments Europe, Ltd. - subscription billing and payment processing
• Brevo - email delivery, deliverability, and bounce handling
• Supabase - database and technical storage infrastructure

If data is processed outside the EU/EEA, this is done under suitable safeguards such as Standard Contractual Clauses.

5. Retention Periods

• Active subscriptions: stored while the contractual relationship is active
• After cancellation: profile-level personal data is generally deleted within 30 days
• Billing-relevant records: retained according to legal retention obligations

6. Your Rights

You have the following rights under the GDPR:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent for future processing

7. Data Security

• TLS encryption for data in transit
• Restricted access to production systems
• Technical and organizational measures in line with Art. 32 GDPR

8. Cookies and Tracking

• Essential cookies: required for secure site functionality
• Analytics cookies: used only in aggregated or privacy-friendly form
• No third-party advertising cookies are used for behavioral profiling

You can control cookie settings in your browser at any time.

9. Automated Decision-Making

AI-based curation supports article selection and summarization. We do not use automated decision-making that produces legal or similarly significant effects for users.

10. Data Breach Notification

In case of a personal data breach with likely high risk to your rights and freedoms, we will notify affected users without undue delay in line with Art. 34 GDPR.

11. Children's Privacy

The service is intended for users aged 16 or older. We do not knowingly process personal data from children under 16.

12. Changes to This Policy

We may update this policy when legal, technical, or product-related changes require it. The current version is always published on this page.

13. Right to Complain

You may lodge a complaint with a data protection supervisory authority. For our registered office in Saxony, the competent authority is the Saxon Data Protection and Transparency Commissioner.

14. Contact for Privacy Requests