privacy policy

01controller

The personal data controller is Sole proprietor Egor Alekseevich Trushenkov (Russian taxpayer ID 583680182669), "we". This policy covers newsmetry.xyz, its subdomains, the API and the Newsmetry Telegram channels.

It is written under Russian Federal Law No. 152-FZ "On Personal Data" and is also meant to inform visitors from the EU and the UK. For any privacy question, email hello@newsmetry.xyz.

02what we process

If you only read the site, we do not ask for any data. With your consent, analytics services collect visit statistics (see "Cookies and analytics").

If you sign up and use an account:

• email address, name and company (name and company are optional);
• your password — only as a cryptographic hash, never in plain text;
• when you sign in with Google, Yandex ID or Apple — your account id at that service and the email it shares;
• interface language, plan, alert settings, watchlist, saved stories and the history of alerts sent to you;
• sign-in sessions: browser and device (User-Agent string), sign-in and last activity time;
• your API key — encrypted — and when it was last used;
• access and plan requests: email, company, use case;
• invoices: number, description, amount, period and payment status.

Your IP address is used at the moment of a request to protect against password guessing and spam (rate limiting, captcha checks) and is not stored in our database.

We do not process special categories of data or biometrics and make no decisions with legal effect based solely on automated processing.

03purposes

• sign-up, sign-in and running your account;
• providing the service: news feed, alerts, the morning email digest (if you choose it), API access;
• service emails: address confirmation, password reset, replies to requests;
• handling requests, issuing invoices and recording payments;
• security: protection against bots, password guessing and abuse;
• visit statistics and improving the site — only with your consent to analytics cookies.

04legal basis

We process data on the basis of your consent (signing up, accepting analytics cookies), to perform the contract you are a party to (access to the service and the API, invoicing) and to meet legal obligations (tax and accounting records).

You can withdraw consent at any time: delete your account in the dashboard ("profile"), decline analytics cookies (cookie settings) or email hello@newsmetry.xyz.

05cookies and analytics

Cookies are small files the site stores in your browser. Necessary cookies keep you signed in and remember your choice; the site cannot work properly without them. Analytics cookies are set only after you click "Accept" in the cookie notice.

Yandex Metrica. The site uses the Yandex Metrica web analytics service (YANDEX LLC, 16 Lva Tolstogo St., Moscow 119021, Russia). Using cookies, Metrica collects pseudonymous data: IP address, browser and operating system, screen resolution, referrer, pages viewed, time on site, clicks and link clicks. Click maps and Session Replay (Webvisor) are enabled: a recording of actions on a page (scrolling, pointer movement, clicks) used to study usability. The data is used only as statistics and not to identify you. Processing follows the Yandex Metrica Terms of Use and the Yandex Privacy Policy.

Google Analytics. The site uses Google Analytics (Google LLC, USA) to count visits. It receives pseudonymous visit data (browser, device, pages, referrer, approximate location) and processes it on servers outside Russia. See the Google Privacy Policy.

You can change your choice at any time: cookie settings. Declining analytics cookies does not affect how the site works. You can also delete or block cookies in your browser settings.

06who receives data

We do not sell personal data. Data is shared only with those we need to run the service, and only as much as needed:

• the hosting provider whose servers run the site and the database;
• the email service that delivers our emails (confirmation, password reset, alerts, digest);
• YANDEX LLC — Yandex Metrica (with your consent), Yandex SmartCaptcha (bot check), Yandex ID sign-in (if you use it);
• Google LLC — Google Analytics (with your consent), Google sign-in (if you use it);
• Apple Inc. — Sign in with Apple (if you use it);
• Telegram — internal notices to us about new sign-ups and requests (email, name, company);
• public authorities — only where the law requires it.

Google LLC and Apple Inc. process data outside Russia, including in the USA; this cross-border transfer happens when you use the corresponding features.

07retention

• account data — while the account exists; deleting the account removes it together with alerts, saved stories and sessions;
• sign-in sessions — until you sign out, at most 30 days;
• one-time links (email confirmation, password reset) — deleted 7 days after they expire;
• alert history — 90 days;
• invoices and payment records — for the periods required by tax and accounting law;
• analytics data — according to the settings and rules of Yandex Metrica and Google Analytics.

08security

The site is served over HTTPS with HSTS. Passwords, session tokens and API keys are stored hashed or encrypted, the database is not reachable from the internet and access to the admin panel is restricted. We rate-limit requests and use a captcha against automated attacks.

09your rights

You may request information about how your data is processed, ask us to correct, restrict or delete it, withdraw your consent, and complain to the Russian data protection authority (Roskomnadzor) or, if you are in the EU or the UK, to your local supervisory authority.

Most data can be changed or deleted in your dashboard. For anything else, email hello@newsmetry.xyz from the address on your account. We reply within 10 working days.

10changes

We may update this policy. A new revision applies from its publication on this page; the revision date is shown at the top. We will email registered users about material changes.