How we handle your data

1. Who we are

The Byte-sized is an indie product studio based in Italy. You can contact us at: hello@thebytesized.com

2. Data we collect

We only collect data strictly necessary to provide our services:

• Email address — when you subscribe to reading list reminders or contact us via the contact form.
• Reading list — articles you save to your reading list (slug, title, save date, read date). This data is stored locally in your browser and, if you provide an email, securely synced to our cloud.
• Contact form data — name, email, inquiry type, and message when you contact us.

We do not collect browsing data, do not use tracking cookies, and do not sell your data to third parties.

3. How we use your data

• Reminder emails — if you subscribe, we use your email to send you weekly reminders about unread articles in your reading list and newly published content.
• Sync — we use your email as an anonymized key (SHA-256 hash) to sync your reading list across devices.
• Contact replies — we use contact form data solely to respond to your inquiry.

4. Legal basis (GDPR)

Processing of your data is based on:

• Consent (Art. 6(1)(a) GDPR) — for sending reminder emails. You can withdraw consent at any time via the unsubscribe link in every email.
• Legitimate interest (Art. 6(1)(f) GDPR) — for responding to contact requests.

5. Data retention

We retain your data as long as you maintain an active account or until you request deletion. Reading list data is retained indefinitely by design (immutable list). Email subscription data is deleted within 30 days of unsubscribing.

6. Your rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with the supervisory authority

To exercise these rights, contact us at: hello@thebytesized.com

7. Third parties

We use the following third-party services to process your data:

• Cloudflare — hosting, CDN, and secure data storage (R2, KV). Cloudflare is GDPR compliant.
• Resend — transactional email delivery. Resend is GDPR compliant.

We do not share your data with any other third parties.

8. Cookies

This site does not use tracking or profiling cookies. We only use browser localStorage to save your reading list locally.

9. Changes to this policy

We may update this policy periodically. Significant changes will be communicated via email to subscribers.