Privacy policy

Who is responsible

Newslish is operated from Bergen, Norway, by its founder Henry (see the About page). Contact: hello@newslish.com. Henry is the data controller for everything described here.

What we collect

Without an account we collect nothing that identifies you. Your level and your free-view count live in your own browser, and page views are measured anonymously.

With an account we store your email address, an optional display name, your preferred level, the words you save, your quiz results, your streak and your email preferences. If you use the writing coach we store your submitted answers and the feedback so you can see your mistake history. If you subscribe to Plus we store your Stripe customer id and subscription status.

What we use it for

• Signing you in and keeping your progress, saved words and review queue.
• Sending the lesson email at the cadence you chose, and the magic sign-in link.
• Running Plus billing and knowing which features your account has.
• Understanding which pages are used, in aggregate, so the site can improve.

We do not sell your data. We do not run ads. We do not share your data with anyone for marketing.

Who processes it

These services process data on our behalf. Each one receives only what its job needs.

Supabase (Postgres, hosted in the EU)

Your account, saved words, quiz results, streak and email preferences. This is the database behind Newslish.

Vercel

Hosts the site and caches pages at the edge. Vercel sees the request logs any web host sees: IP address, browser and the page you asked for.

Google Analytics 4

Anonymous usage measurement: which pages are read and for how long. Advertising features and ad personalisation are switched off in our tag.

Resend

Sends our email: the magic sign-in link, the daily or weekly lesson email and replies to the contact form. Resend receives your email address and the message.

Stripe

Handles Plus payments. Card details go straight to Stripe and never touch Newslish. We store your Stripe customer id and subscription status.

OpenAI

Powers the text simplifier and the writing coach. It receives only the text you submit to those two features, never your account details.

Cookies and browser storage

• A session cookie that keeps you signed in once you have an account.
• Browser storage (not a cookie) for your chosen level, your free-view count, your local streak and the daily counter for the text simplifier.
• An attribution cookie, set for seven days when you arrive from one of our emails, so we can tell which email brought you back.
• Google Analytics sets its own measurement cookie. It is not used for advertising.

How long we keep it

Account data is kept for as long as your account exists. Delete your account and it is removed within 30 days, except invoices, which Stripe and we must keep for the period bookkeeping law requires. Google Analytics keeps its anonymous data for at most 14 months. Text you send to the simplifier is not stored. Your writing coach answers and the feedback are stored as your mistake history until you delete your account.

Your rights

Under the GDPR you can ask to see the data we hold about you, correct it, receive a copy, restrict how we use it, object to a use, or have it deleted. Email hello@newslish.com and we answer within 30 days. You can also complain to the Norwegian Data Protection Authority (Datatilsynet) or the authority in your own country.

Changes

When this policy changes, the date at the top changes with it. Material changes are announced in the lesson email.