Privacy Policy

JustFifteen is a read-only feed reader built for people who want to follow a small, intentional list of voices without the noise. This privacy policy explains honestly what data we collect, why, and how we handle it.

Short version: we collect only what's necessary to run the product. We don't sell your data. We don't share it with third parties. You can delete your account anytime.

What we collect

• Account information — your name (optional), email address, and a hashed password when you register.
• People you follow — the names and social handles you add to your personal list of 15 people.
• Bookmarks — content items you save within the app.
• Usage data — when you last logged in and when you last refreshed your feed. This helps us understand if the product is working.
• Subscription data — if you're on a paid plan, we store your subscription status. Payment processing is handled by Stripe; we never see your card details.

How we use it

• To authenticate you and show you your feed.
• To fetch content from public sources on behalf of the people you follow.
• To send transactional emails (password resets, account notices). Nothing promotional unless you ask.
• To improve the product — understanding aggregate usage patterns helps us prioritise what to build.

Who we share it with

Nobody. We don't sell, rent, or share your personal data with advertisers, data brokers, or third parties. Full stop.

We use a small number of infrastructure services to run the app: a hosting provider, a database provider, and a payment processor (Stripe). Each processes data only as needed to run the service, and under strict data processing agreements.

Data storage & security

Your data is stored in a PostgreSQL database hosted in the EU. Passwords are hashed with bcrypt before storage — we never store them in plain text. All connections use HTTPS/TLS.

Your rights (GDPR)

If you're in the EU or UK, you have rights under GDPR. These include:

• Access — you can ask us what data we hold about you.
• Correction — you can update your name and email in Settings.
• Deletion — you can delete your account from Settings → Account. This removes all your data permanently.
• Portability — reach out and we'll export your data in a readable format.
• Objection — you can object to any processing you're not comfortable with.

Cookies

We use one cookie: an httpOnly authentication token that keeps you logged in. No tracking cookies. No advertising pixels. No third-party cookies.

Data retention

We keep your data while your account is active. If you delete your account, your data is removed within 30 days. We don't keep backups of deleted accounts indefinitely.

Contact

Questions about privacy? Email support@justfifteen.polsia.app — a real person will respond.