Privacy

The short version

We do not track you. There is no analytics, no advertising network, no third-party tracker, and no profile built from your reading. We store the minimum needed to run an account and a subscription, and we do not sell or share it.

What we store

• Your email address, so we can identify your account and contact you about it.
• Your password, hashed. We never store or see the password itself.
• Subscription state: your Stripe customer and subscription identifiers, your status, and the date your current period ends.
• A card fingerprint, when you add a card: an opaque identifier Stripe gives us for that card. It holds no card number and cannot be turned back into one. We keep it so the same card can be recognised if it is used to start another free trial.
• A payment-identity hash, for the same reason, when you pay through Link. Link does not give us a card fingerprint. It gives us only the email address held with it, so we store a one-way keyed hash of that address instead of the address itself. It cannot be reversed, and it cannot be used to check whether a particular address has an account here.
• A trial record, so we can offer one free trial per email address: a one-way keyed hash of your address, with case, "+" tags and Gmail's dots folded so spellings of one mailbox match. It holds no address and cannot be reversed. It is kept after an account is closed, because its only purpose is to stop the same address starting a second trial.

That is the entire list. We do not record what you read, what you search for, or which stories you open.

Payment details

Card details are entered on Stripe's own payment page and go directly to Stripe. They never reach our servers, so we could not store your card number even if we wanted to. Stripe's handling of that data is governed by their privacy policy.

Cookies

We set cookies only to keep you signed in. They are strictly necessary: they carry no identifier used to profile you, they are not shared with anyone, and they exist only because you asked to sign in.

• sp_at and sp_rt, your session. Both are httpOnly, so no script on the page can read them.
• Django's CSRF and session cookies, which protect form submissions and the admin area.

There are no advertising or analytics cookies, because there is no advertising or analytics.

Third parties

We use as few as possible, and here is the complete list:

• Stripe for payments and subscription billing.
• That is the whole list. Page assets, including the charting and layout libraries, are served from our own domain rather than a public CDN, so loading a page does not reveal your IP address to anyone but us.

We do not use an analytics provider, an advertising network, a session recorder, or a customer-data platform.

The news itself

Spuuun reads publicly available news feeds. It stores article metadata, short snippets and links so it can group coverage and show you who reported what. It does not republish articles. Generated summaries are our own writing about the coverage and do not reproduce it.

Your data

You can ask us to export or delete your account data at any time by emailing support@spuuun.ai. Deleting your account removes your email, password hash and subscription record; the trial record above stays, holding no address. Billing records Stripe is required to keep for tax and accounting purposes remain with Stripe.

Contact

SOMETIMES WE GET YOU MEDIA LLC, WASHINGTON. Questions: support@spuuun.ai.