Privacy
This site is run by J-O Eriksson. It collects as little as it can, and never sells or shares what it has.
Reading and searching
You don't need an account to search or read. There are no ads, analytics, trackers or third-party scripts or fonts.
- Search counts. For each day, the site counts how often each search was made and how many found nothing. That tells us which topics readers look for. These counts say nothing about who searched, and they're deleted after 365 days.
- Abuse protection. To stop floods of requests, your IP address (or your account, if you're signed in) is counted in memory for at most an hour, then forgotten.
- Server logs. The application's log records each request (time, page and search terms) without your IP address. The web server in front of it may keep its own access logs for a short time to keep the site running.
If you create an account
The site stores your email address, your name if you add one, your password (only as a one-way hash), and when you signed up and last signed in. It also stores what you save: bookmarks, saved searches and their email digest setting, and feed suggestions.
If you turn on two-factor sign-in, the site also stores your authenticator app's secret key, your recovery codes, and your passkeys' public keys (never the private key, which stays on your device).
Your email address is used to confirm it, to reset your password, to send sign-in codes when you ask for one, and for the digests you turn on, and for nothing else. The emails are sent through our email provider.
Invitations
If someone invites you, the site stores your email address, who invited you and when, and sends you one email with a sign-up link. The link works for 7 days. If you don't use it, the invitation, with your address, is deleted 30 days after it expires. If you do sign up, it becomes part of your account and is deleted with it.
Cookies
Only the cookies the site needs to work, so there's nothing to consent to:
sessionid: keeps you signed in, for up to two weeks.csrftoken: protects forms from being submitted by other sites.messages: short notices like "Profile updated", deleted once shown.
Your data, your choice
- Download your data as a JSON file at any time.
- Delete your account, and everything in it is deleted right away. It can survive in the daily backups for up to 14 days, until they're replaced.
- Unsubscribe from a digest with the link in any digest email.
For anything else, such as correcting data or asking what's stored about you, contact the site owner. You can also complain to a data protection authority (in Sweden: IMY).