Privacy policy

Your email address and name to sign you in and contact you about your account. Billing details are handled by Stripe; we see the plan, the status and the last digits of the card, never the full number.

Basic request data (IP address, browser) for security, rate limits and bot protection. Sign-up uses Cloudflare Turnstile to tell people from scripts.

You decide who's on your list. For each subscriber we store the email address, the fields you import or collect, their subscription status, and the events of the emails you send them: delivered, opened, clicked, bounced, complained or unsubscribed.

For this data you are the controller and we are your processor. We only use it to run your newsletter, never for our own marketing.

Resend (United States) sends your emails and reports their delivery. Stripe (United States) handles payments. Cloudflare (United States) protects the site, checks sign-ups with Turnstile and stores the images you upload. Upstash (United States) queues scheduled sends. Each only receives what its job needs.

The app and its database run on servers we operate ourselves. When data leaves the EU or UK for these providers, it relies on their Standard Contractual Clauses or the EU-US Data Privacy Framework. We sign a data processing agreement on request.

Account and list data stay while your account is open. When you delete your account, it's removed after a short grace period, except billing records we must keep by law. Addresses that unsubscribed or complained are kept as a one-way hash so they're never emailed again by mistake.

You can export your contacts at any time and delete your account from the account page. To access, correct or delete personal data, email charles@botensten.com. Subscribers can unsubscribe from any email with one click, and can ask the newsletter's author or us to delete their data.

Only what the service needs: a session cookie when you're signed in, a short-lived cookie after you pass the bot check, and your theme choice. No advertising or cross-site tracking cookies.

Questions about privacy go to charles@botensten.com.