Privacy Policy

• We only collect what we need to run the Service.
• We don't sell your data. We don't run ads.
• We share data with a small set of trusted service providers (database, email, AI) listed below.
• You can delete your account any time — 7-day cooldown then permanent removal.
• Questions? Email hello@gobbles.news.

We collect information in three categories:

Information you give us:

• Account info — your email address, password (stored as a secure hash, never in plain text), and optional display name
• Channel preferences — the channels you create or follow, your favorite channel, and your digest settings
• User content — channel topic descriptions, feedback submissions, any text you enter into forms

Information we collect automatically:

• Technical data — your IP address, browser type, and approximate location (derived from IP) for security, rate limiting, and abuse prevention
• Usage data — which posts you open via email links (standard email-client analytics)
• Audit log — records of sensitive actions on your account (account deletion requests, password changes) for security and compliance

What we don't collect:

• We don't run third-party analytics or tracking scripts (no Google Analytics, no Facebook Pixel, no Mixpanel)
• We don't place advertising cookies
• We don't sell data to data brokers

• To provide the Service — authenticate you, remember your preferences, deliver daily digest emails, generate channel content tailored to what you follow
• To keep the Service safe — rate limiting, bot detection (via hCaptcha), abuse investigation
• To communicate with you — essential account emails (confirmation, password reset, digest), and rarely, product updates you can unsubscribe from
• To respond to feedback — when you submit feedback via /feedback or /contact, we use the message and (if provided) your email to follow up
• To comply with the law — respond to valid legal requests and protect our rights

If you're in the European Economic Area or the UK, we process your personal data under one of these legal bases:

• Contract — providing the Service you signed up for
• Legitimate interests — running a secure, non-abusive platform (rate limiting, audit logging)
• Consent — where required, such as opt-in marketing emails (we don't send any currently)
• Legal obligation — responding to government or regulatory requirements

We don't sell your personal data. We share limited data with a small set of third-party service providers that help us run the Service:

• Supabase(AWS-hosted database & authentication) — stores your account, channel subscriptions, and user-generated content. Supabase privacy.
• Cloudflare(web infrastructure & CDN) — hosts the gobbles.news web application and sees your IP when you visit the site. Cloudflare privacy.
• Resend (email delivery) — delivers our transactional and digest emails to your inbox. Resend privacy.
• hCaptcha (bot protection) — validates sign-up, sign-in, and password reset requests. hCaptcha privacy.
• AI providers — Google (Gemini), Anthropic (Claude), and Perplexity — generate and curate channel content on our behalf. Your channel topics or briefs may be processed by these providers to produce the daily content. We don't send your email address or personally identifying info with these queries.

We may also disclose information to comply with a valid legal request, to protect our rights, or in connection with a business transfer (e.g., if Gobbles is acquired or merged).

• Account data — until you delete your account (7-day cooldown, then permanent purge)
• Email digest history — published briefings remain on the site indefinitely as part of channel archives
• Feedback submissions — kept indefinitely for product improvement; the ID is associated with your account until you delete it, after which the row is anonymized or removed
• Rate-limiting & audit logs — typically less than 30 days; longer if tied to an ongoing abuse investigation
• Backups — Supabase may retain backups for up to 30 days; deleted data is purged from backups in the normal rotation

You have the following rights over your data:

• Access — request a copy of your personal data by emailing hello@gobbles.news
• Correction — update your profile information in your dashboard, or email us
• Deletion — use the "Delete account" button in account settings (7-day cooldown applies)
• Portability — request an export of your data in a common format
• Objection / restriction — ask us to stop or limit specific processing; we'll honor valid requests or explain if we can't
• Withdraw consent — unsubscribe from emails via any email footer's "Unsubscribe" link
• Complain — EU/UK residents can complain to their local data protection authority

We aim to respond to rights requests within 30 days. To exercise any right, email hello@gobbles.news from the email address on your account.

Gobbles uses only strictly necessary cookies and local storage — for keeping you signed in, remembering your channel drafts, and the one-click unsubscribe flow. We don't use analytics, advertising, or tracking cookies. Because we only use strictly-necessary technologies, we don't display a cookie consent banner (consent isn't required for essential storage under GDPR/ePrivacy).

We use industry-standard practices to protect your data: encrypted connections (HTTPS), hashed passwords, role-level access controls on the database, automated bot detection, and rate limiting. No system is 100% secure. If we learn of a breach affecting your personal data, we'll notify you and the relevant authorities as required by law.

Gobbles is operated from the United States. By using the Service, you understand your data may be transferred to and processed in the United States, where data-protection laws may differ from those in your country. We use the standard contractual clauses or other valid transfer mechanisms where required.

Gobbles is not directed at children under 13 (or the minimum age in your jurisdiction if higher). We don't knowingly collect personal data from children under that age. If you believe we've inadvertently collected data from a child, email hello@gobbles.news and we'll delete it.

We may update this policy to reflect changes to the Service or the law. When we do, we'll update the effective date at the top of this page. Material changes will also be announced by email to account holders where practicable. Continued use of the Service after an update constitutes acceptance.

Questions, requests, or concerns about privacy? Email hello@gobbles.news. For general questions, see the Contact page.