The 30-second version
We collect as little data about you as we can. We don't share it with anyone. We delete it when you ask. We don't run tracking ads. We don't profile you.
What we collect
Newsletter subscribers
When you subscribe to the newsletter, we store: your email address, the timestamp of your opt-in, and the source (which page you subscribed from). That's it.
We use this data to: send you the newsletter, and only the newsletter. We never share your email with sponsors or third parties.
Pro members (when launched)
When you sign up for a Pro membership (Q3 2026 launch), we store: email, optional username, timestamp of signup, your subscription status (free / pro), and the Stripe customer ID needed to manage billing.
We do NOT store payment card details — Stripe handles all of that on its own infrastructure. We see only the last 4 digits and card brand, surfaced through Stripe's portal for your reference.
Site visitors
We use Vercel Analytics for traffic measurement. It collects: page views, referrer, user agent (browser + OS), country (from IP, IP is discarded). It does NOT use cookies, does NOT track across sessions, does NOT build a profile of you.
We do not use Google Analytics, Facebook Pixel, ad-network trackers, or any third-party tracking SDK.
What we don't collect
- Your name (unless you tell us)
- Your physical address
- Your phone number
- Your IP address (Vercel Analytics discards it after geocoding)
- Browsing history outside this site
- Anything from device sensors / cameras / microphones
Cookies
We use exactly two cookies:
NEXT_LOCALE— remembers your language preference (en or fr). Stored client-side, expires after 1 year, no third party access.session— only set if you sign in to a Pro account. Required for authentication. Expires after 7 days. No third parties.
That's it. No tracking cookies, no advertising cookies, no analytics cookies, no consent-mode shenanigans.
Where your data lives
- Newsletter database: PostgreSQL hosted in Frankfurt or Helsinki (EU).
- Email delivery: AWS SES, region eu-west-1 (Ireland).
- Site hosting: VPS in Germany (Hetzner) or Cloudflare edge for static assets.
- Stripe customer data (Pro tier): Stripe infrastructure, US-based but DPF-certified for EU data transfers.
How long we keep data
- Newsletter subscribers: until you unsubscribe (then deleted within 30 days)
- Pro members: until you delete your account or cancel + 90 days
- Server logs: 30 days, then deleted
- Analytics: aggregated, no individual records
Your rights (GDPR)
If you're in the EU/EEA (or UK), you have the right to:
- Access the data we hold about you — email contact@pocketclaw.dev
- Correct any inaccurate data
- Delete your data (we comply within 30 days unless legal obligations require retention)
- Port your data to another service (we provide a JSON export)
- Object to specific processing
- Lodge a complaint with your data protection authority (CNIL in France, ICO in UK, etc.)
Children
PocketClaw is not directed at children under 16. We don't knowingly collect data from children. If you believe a child has subscribed, email us and we'll delete the record immediately.
Changes to this policy
When we update this policy, we'll note it in the changelog and — if the change is meaningful — email subscribers. We won't make material changes retroactively to data we collected under prior terms.
Contact
Privacy questions, data requests, complaints: contact@pocketclaw.dev. We respond within 5 working days.
See also: terms, affiliate disclosure, about.