Privacy policy
Oossa collects as little personal data as possible: your email address if you subscribe to the newsletter, and nothing else.
Who is responsible
Oossa (oossa.com) is responsible for the personal data processed on oossa.com. Contact: hello@oossa.com.
What we collect
Newsletter: if you subscribe, we store your email address, the language you chose, when you subscribed and confirmed, when we last sent you a newsletter, and a random code used in your confirmation and unsubscribe links. We use a double opt-in: nothing is sent until you confirm from your inbox.
No analytics or advertising: Oossa uses no analytics tools, no advertising trackers and no tracking cookies.
Anonymous reader signals: we count how many times each article is read and store the optional 👍/👎 answer at the end of articles – without IP address, cookies or anything that identifies you. We use it to show "Most read" and to improve which stories we publish.
Your browser: we save one setting in your browser's local storage to remember whether you closed or used the newsletter pop-up. It never leaves your device.
Technical logs: our hosting provider records technical data such as IP address and browser type when you visit, to keep the service secure and working.
Why, and on what legal basis
We send the newsletter because you asked for it (consent, GDPR article 6(1)(a)). You can withdraw your consent at any time with the unsubscribe link in every email. Technical logs are processed based on our legitimate interest in running a secure service (article 6(1)(f)).
Who else processes data
Vercel (website hosting, USA – protected by the EU Standard Contractual Clauses), Neon (database, hosted in Frankfurt, EU) and Migadu (email delivery, EU). Images are loaded from Unsplash, which receives your IP address when an image is shown. OpenAI provides AI tools used in producing articles; no reader data is ever sent to OpenAI.
How long we keep it
Subscriber data is kept until you unsubscribe. After that we keep only your email address marked as unsubscribed, so that we never email you again by mistake; ask us and we delete it completely. Unconfirmed sign-ups are deleted after 30 days.
Your rights
You have the right to access, correct and delete your data, to object to processing and to data portability. Write to hello@oossa.com. You can also complain to your data protection authority – in Sweden, IMY (imy.se).