Privacy Policy

Subscribeam (“we”, “us”) is a website and service, available at subscribeam.com, that helps people discover newsletters and subscribe to them from one place. This Privacy Policy describes how we handle personal data when you use our website and services (the “Service”). By using the Service, you agree to the practices described here.

1. Data we collect

We collect only the data we need to run the Service:

• Account data. Sign-in is provided by EmbedAuth (email and password, one-time codes, or Google). When you create an account or sign in, we receive and store your email address and, where available, your name. If you sign in with Google, Google shares this basic profile information through EmbedAuth; we never receive your password.
• Subscription data. When you subscribe to a newsletter through us, we record the email address you subscribed with, which newsletters you selected, the time of the request, and whether the hand-off to the newsletter succeeded. For a subscription made without an account, we also record the IP address the request came from, as a record of the request. For every subscription, we also record the country the request came from. Our network provider, Cloudflare, determines it from your IP address; we keep only the country, not a more precise location.
• Email history. When the owner of a newsletter you subscribed to through Subscribeam sends you an email through us, we record which email was sent to your address, when, and whether it was delivered.
• Support requests. When you open a support ticket from your dashboard, we store the category you chose, the application it is about (if any), and the messages you and our team exchange. We email you when we reply. When you write to us through the support button in the corner of our pages, the conversation is held by SupportDist (see below): your name, email address, messages, and the page you wrote from (its address without anything after the path).
• Payment data. Paid plans are processed by our payment provider, Stripe. Stripe handles your card details directly — we do not receive or store full card numbers. We store a subscription identifier and your plan status so we know your account is active.
• Technical data. Like most websites, we automatically receive limited technical information such as your IP address and browser type. We use the IP address to limit how often requests can be made (abuse prevention) and do not store it, except as described for subscriptions above.

2. How we use your data

• To create and manage your account and authenticate you.
• To submit your chosen email address to the newsletters you select (see “Third parties” below) and to let you manage or cancel those subscriptions.
• To process payments and manage paid plans.
• To send service emails, such as sign-in codes, confirmations and account notices.
• To deliver the emails newsletter owners write to their subscribers through Subscribeam, on the owner's behalf.
• To show newsletter owners statistics about their sign-ups, such as how many of their subscribers joined from each country. Owners see counts per country, not the country of an individual subscriber.
• To keep the Service secure, prevent abuse, and comply with legal obligations.

3. Newsletters and third parties

If you subscribe through a Subscribeam widget on someone else's website, the owner of that widget receives your email address and can export their list of subscribers; their use of it is governed by their own privacy policy.

The owner of a newsletter you subscribed to through Subscribeam can also send you emails through us. The owner decides what to send and when; we deliver those emails on their behalf, from a Subscribeam address, and replies go to the owner. Every one of them contains a link to unsubscribe. Using it — or your email app's own unsubscribe button — deletes your address from that owner's list straight away, and you receive no further emails from them through Subscribeam.

The core purpose of Subscribeam is to submit your email address to the newsletter services you choose. When you subscribe to a newsletter through us, we pass your email address (and, where a newsletter requires it, other fields you provide) to that newsletter's own signup system on your behalf. Once submitted, your data is also handled by that newsletter provider under their privacy policy, which we do not control. You can unsubscribe from any newsletter at any time using the controls we provide or the unsubscribe link in the newsletter itself.

We also rely on a small number of service providers to operate:

• EmbedAuth — for sign-in; it receives the email address and name you sign in with.
• Google — for optional sign-in (through EmbedAuth) and, where enabled, advertising (see below).
• paybroadcast — runs our checkout and billing; it receives your account identifier and email address, and processes payments through Stripe.
• Stripe — for payment processing.
• SupportDist — runs the support button on our pages and holds the conversations started there on our behalf. Its button and window set no cookies and load nothing from anyone else.
• Cloudflare — for content delivery, hosting of our embeddable widget, and determining the country a request comes from.
• Our email provider — to deliver transactional emails and the emails newsletter owners send to their subscribers.

4. Cookies and advertising

Cookies are small files a website stores in your browser; “local storage” works similarly. We use two kinds:

• Strictly necessary — they keep you signed in, protect our forms against forgery and remember your cookie choices. The Service cannot work without them, so the law does not require your consent for them, and they are never used for advertising or tracking.
• Advertising — set by Google AdSense, and only after you accept them. Until you do, the AdSense script is not loaded at all. Google and its partners use these cookies to show ads, limit how often you see the same ad, prevent fraud and measure ad performance, and may personalise ads based on your visits to this and other websites. Google acts as an independent controller of that data; see how Google uses information from sites that use its services.

The first time you visit, we ask whether you accept advertising cookies. Rejecting them is as easy as accepting them, and the site works the same either way. We remember your choice for six months, then ask again. You can change or withdraw your consent at any time — as easily as you gave it — through Cookie settings, also linked at the bottom of every page. Withdrawing consent stops advertising cookies from being used and deletes the ones AdSense stored on our domain.

You can also block or delete cookies in your browser settings (blocking strictly necessary cookies will stop sign-in from working), and control Google advertising more broadly:

• Opt out of personalised advertising at Google Ads Settings.
• Opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info/choices or, in Europe, youronlinechoices.eu.
• See how Google uses cookies in advertising.

5. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we process personal data on the following bases: performance of our contract with you (to provide the Service), your consent (for optional advertising cookies), our legitimate interests (security, improving the Service, and giving newsletter owners statistics about their sign-ups), and compliance with legal obligations. For emails a newsletter owner sends you through Subscribeam, the owner is responsible for having a lawful basis to email you, and we process your address on their behalf and on their instructions.

6. Data retention

We keep account and subscription data for as long as your account is active and as needed to provide the Service. IP addresses recorded with subscriptions, and technical details of failed hand-offs to newsletters, are deleted after 90 days. The country recorded with a subscription is deleted with it.

When you unsubscribe from a newsletter owner's emails, your subscription is deleted immediately. The owner's record of emails already sent to you (which emails, when, and whether they were delivered) is kept until the owner deletes that email from their history or deletes their account. To have it removed sooner, contact us at [email protected].

You can delete your account at any time from Settings in your dashboard. Deleting it immediately erases your account, the applications you created with their subscriber lists and the emails sent to them, your subscriptions with us and your support tickets, together with your sign-in (email address and password) at EmbedAuth. Newsletters you already joined keep the copy of your address you gave them; unsubscribe there to remove it. We may keep records we are required to retain for legal, accounting or security reasons.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can delete your account yourself in Settings; to exercise any of the other rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

10. Contact

Questions about this policy or your data? Email us at [email protected].