1. Information we collect
Summary: We collect what you give us (including optional newsletter sign-up), what devices send automatically, and basic profile data from sign-in providers.
We collect personal information that you provide to us, information collected automatically, and information received from third-party services you use to sign in or connect to our platform.
Information you provide directly
When you use our Services, you may provide:
- your name
- email address
- username
- account and authentication data
- profile information
- profile photo, if you choose to upload one (stored in our object storage)
- messages or other information you send to us
- email address you provide when subscribing to our newsletter, which may be the same as or different from your account email
Newsletter subscriptions
If you opt in to our email newsletter (for example through Settings, a sign-up or welcome prompt, or our subscribe API), we store your email address in our database so we can send updates and editorial messages you asked to receive. When our email delivery is configured, we may sync that address to Resend (or a comparable provider) as a contact or audience member so messages can be delivered and lists can be managed. If you are signed in when you subscribe, we may link the subscription to your account so we can honor unsubscribe and account deletion together.
Information collected automatically
When you visit or use our Services, we may automatically collect:
- IP address
- browser type
- device type and operating system
- language preferences
- referring and exit pages
- pages viewed
- time spent on pages
- search activity
- log and usage data
- security-related activity
- cookie and similar tracking data
Information from third-party services
If you sign in with Google or other connected accounts, we may receive:
- your name
- email address
- profile picture
- account identifier
- other basic profile details made available by that provider
AI-related information (if offered)
If we introduce features that use third-party AI services to help generate or improve content or product behavior, we may process prompts, outputs, and related technical information necessary to operate those features.
2. How we use your information
Summary: We use data to run accounts, deliver features, secure the platform, communicate with you, and improve the product.
We use personal information to:
- create and manage accounts
- authenticate users
- provide access to articles and platform features
- save reading progress, completed items, and preferences
- personalize your experience
- maintain security and prevent fraud
- respond to questions and support requests
- send administrative notices and service updates
- send our email newsletter and related messages when you have subscribed
- improve our content, features, and user experience
- analyze usage trends
- deliver or measure advertising, if we enable advertising on the Services
- comply with legal obligations
3. Legal bases for processing
If you are located in the EEA, UK, Switzerland, or Canada, we rely on one or more of the following legal bases:
- your consent
- performance of a contract
- our legitimate interests
- compliance with legal obligations
- protection of vital interests
4. How we share information
Summary: We share data with service providers (auth, hosting, database, storage, email delivery) who help us operate the site, and when the law requires it.
We may share personal information with third parties that help us operate the Services, including:
- Clerk for account registration and authentication
- Google for sign-in and related account services
- Cloudflare for hosting, infrastructure, security, performance, and our database (D1)
- Cloudflare R2 (or similar object storage) for profile images you choose to upload
- Resend for newsletter contact sync and email delivery when that integration is enabled
- Google AdSense for advertising, if we enable it
- Amazon affiliate programs or similar partners, if we use affiliate links
- Anthropic, Claude, or other AI providers, only if we enable in-product AI features that use them
We may also share information:
- in connection with a business transfer, merger, acquisition, or sale
- to comply with law, legal process, or government requests
- to protect our rights, users, and Services
We do not sell personal information in the ordinary sense unless a law defines certain advertising-related sharing as a "sale" or "sharing," in which case you may have rights to opt out where applicable.
5. Third-party websites
Our Services may include links to third-party websites, tools, or services. We are not responsible for the privacy practices, content, or security of those third parties. Please review their policies before using their services.
6. Cookies and similar technologies
We use cookies, pixels, local storage, and similar technologies to:
- keep you signed in
- remember preferences (such as theme)
- secure the Services
- understand how the Services are used
- support analytics or advertising if we add or enable those tools
- support affiliate measurement if we use affiliate links
For more details, see our Cookie Policy.
7. Artificial intelligence features
From time to time we may introduce product features on NextGramCode that are generated or assisted by artificial intelligence. Editorial articles may also discuss AI; this section applies when we offer interactive AI-powered features in the Services.
When such AI features are available and you use them:
- outputs may not always be accurate or complete
- AI-assisted content from those features is provided for informational purposes only
- you should not rely on those outputs as professional advice
- we may use third-party AI service providers to operate the feature
8. Social logins
If you sign in using Google or another third-party account, that provider may share certain profile information with us. Their own privacy policy governs how they collect and process your data before it reaches us.
9. International data transfers
Your information may be processed in countries other than your own, including the United States, where our providers may operate. If required by law, we use appropriate safeguards for cross-border transfers.
10. Data retention
We keep personal information only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.
In general, we retain account-related information for as long as your account remains active. When information is no longer needed, we delete, anonymize, or securely store it until deletion is possible.
Newsletter subscription records are kept so long as you remain subscribed or until we need them to demonstrate consent or comply with law. When you unsubscribe or delete your account (including linked newsletter rows), we remove or update your subscription data as described in our product flows and remove or sync changes with our email provider where applicable.
11. Security
We use reasonable technical and organizational safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Children's privacy
We do not knowingly collect, solicit, or market to children under 18 years of age, or the equivalent age required by law in your jurisdiction. If we learn that we have collected personal information from a child, we will take reasonable steps to delete it.
13. Your privacy rights
Depending on where you live, you may have rights to:
- access your personal information
- correct inaccurate information
- delete your personal information
- restrict or object to certain processing
- receive a copy of your data
- withdraw consent where processing is based on consent
- unsubscribe from our newsletter using the unsubscribe options we provide (for example in Settings or via unsubscribe links in messages, when available)
- opt out of targeted advertising or certain profiling, where applicable
You may exercise these rights by contacting us at contact@nextgramcode.com or through nextgramcode.com/contact.
14. Do-Not-Track
Some browsers include a Do-Not-Track feature. At this time, we do not respond to DNT signals, because no uniform standard has been finalized.
15. U.S. state privacy rights
If you are a resident of certain U.S. states, you may have additional rights regarding your personal information. These rights may include the right to know, access, correct, delete, and opt out of certain processing.
If you wish to exercise those rights, contact us at contact@nextgramcode.com.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. Your continued use of the Services means you accept the revised policy.
17. Contact us
If you have questions about this Privacy Policy or how we handle your data, contact us at:
- NextGramCode
- Email: contact@nextgramcode.com
- Contact page: nextgramcode.com/contact