Privacy policy
Last updated: 2026-10-18
What we collect
| What | Why | Processor | Kept for |
|---|---|---|---|
| Email address, list joined (Daily Brief or Premium waitlist), signup page and time, confirmation and unsubscribe status | To send the newsletter you asked for (double opt-in) and honor unsubscribes | Cloudflare (D1 database); Resend (email delivery and contact list) | Until you unsubscribe, then up to 30 days; an unsubscribe record (email + date) is kept so we never email you again |
| Premium billing: name, email, billing address, payment method, subscription and invoice history | To charge your subscription, renewal reminders and cancellation confirmations | Stripe (we never see or store full card numbers); Cloudflare D1 stores your Stripe customer id, status, plan and renewal date | While you are a member, then 7 years for tax and accounting records |
| Premium watchlist, email preferences, consent record (terms version, time) | To run the features you use and prove what you agreed to | Cloudflare D1 | While you are a member, then up to 90 days (consent records: 7 years) |
| Email delivery events (delivered, bounced, complained) | Deliverability and abuse handling | Resend | Per Resend’s retention (about 30 days of logs) |
| Page views and visits: page path (without the query string), referrer, country, device type, browser, operating system and page-load timings | To see which pages are useful and fast | Cloudflare Web Analytics: no cookies, no localStorage, no fingerprinting, no cross-site profile | Aggregated reports in Cloudflare (per Cloudflare’s retention) |
| Security logs (IP address, user agent) and a hashed rate-limit key | To protect sign-in and signup from abuse | Cloudflare | Hours to a few days |
Cookies
We set only functional cookies: a signed Premium sign-in cookie (after you subscribe or sign in). No advertising or tracking cookies. Our analytics (Cloudflare Web Analytics) set no cookies and use no localStorage.
What we don’t do
We do not sell or rent your personal information, do not share it for cross-context advertising, and do not use it for automated decisions about you. Sponsors in the free brief never receive subscriber data.
Your choices and rights
Every email has a one-click unsubscribe. You can ask us to access, correct, export or delete your data, or object to processing, by writing to hello@thetagrade.com; we reply within 30 days. Billing records we must keep by law are retained as stated above. EU/UK residents may also complain to their data protection authority.
International transfers
Our processors (Cloudflare, Stripe, Resend) may process data in the United States and other countries under their standard data processing terms.