Privacy policy

Who is responsible

OLY Europe LTD (VAT BG207334983), General Tsimerman 56, 9002 Varna, BG is responsible for the personal data processed on oossa.com. Contact: hello@oossa.com.

What we collect

Newsletter: if you subscribe, we store your email address, the language you chose, when you subscribed and confirmed, when we last sent you a newsletter, and a random code used in your confirmation and unsubscribe links. We use a double opt-in: nothing is sent until you confirm from your inbox.

Statistics (Google Analytics): only if you click "Accept" in the cookie banner, we use Google Analytics 4 to measure which pages are visited, from which country and on what kind of device. It sets cookies (_ga, _ga_*, stored for up to 2 years), shortens your IP address and is never used for advertising. If you decline, Google Analytics is not loaded at all. You can change your choice at any time via "Cookie settings" at the bottom of every page.

No advertising: Oossa shows no ads and uses no advertising trackers.

Anonymous reader signals: we count how many times each article is read and store the optional 👍/👎 answer at the end of articles – without IP address, cookies or anything that identifies you. We use it to show "Most read" and to improve which stories we publish.

Push alerts: only if you turn on alerts, your browser's push service (for example from Google, Mozilla or Apple) gives us a technical delivery address with two keys. We store it with the language you chose and when we last sent an alert. It contains no name or email address.

Your browser: we save a few settings in your browser's local storage – your cookie choice, your language choice, whether you closed the newsletter box and when you last visited, so we can mark stories that are new to you. They never leave your device.

Technical logs: our hosting provider records technical data such as IP address and browser type when you visit, to keep the service secure and working.

Why, and on what legal basis

We send the newsletter because you asked for it (consent, GDPR article 6(1)(a)). You can withdraw your consent at any time with the unsubscribe link in every email. Technical logs are processed based on our legitimate interest in running a secure service (article 6(1)(f)).

Google Analytics is used only with your consent (GDPR article 6(1)(a) and the ePrivacy rules on cookies); you can withdraw it at any time via "Cookie settings".

We send push alerts because you turned them on (consent, GDPR article 6(1)(a)): at most three a day, only about the biggest AI news. Turn them off at any time with the same button or in your browser settings.

Who else processes data

Vercel (website hosting, USA – protected by the EU Standard Contractual Clauses), Neon (database, hosted in Frankfurt, EU) and Migadu (email delivery, EU). Images are loaded from Unsplash, which receives your IP address when an image is shown. OpenAI provides AI tools used in producing articles; no reader data is ever sent to OpenAI.

Google Ireland Limited (Google Analytics, only with your consent). Data may be transferred to Google LLC in the USA, which is certified under the EU–US Data Privacy Framework.

How long we keep it

Subscriber data is kept until you unsubscribe. After that we keep only your email address marked as unsubscribed, so that we never email you again by mistake; ask us and we delete it completely. Unconfirmed sign-ups are deleted after 30 days.

Google Analytics data is kept for 14 months and then deleted automatically.

A push delivery address is deleted as soon as you turn alerts off, or when your browser's push service tells us it is no longer valid.

Your rights

You have the right to access, correct and delete your data, to object to processing and to data portability. Write to hello@oossa.com. You can also complain to your data protection authority – in Sweden, IMY (imy.se).