EnergyPod privacy & data

Email address, optional display name, password hash (never the password itself), language preference, and subscription state.

IP address, requested path, response status, bytes, and timing, kept for security and debugging for up to 30 days.

For signed-in API/MCP callers, a daily count of requests, bytes returned, and endpoint/tool names.

What you submit, the page it concerns, and your email if you choose to include it.

to create and secure your account, authenticate you, issue/revoke API keys, prevent abuse, and keep the service available.

to send the newsletter you asked for.

aggregate, cookieless measurement of what is read and which API surfaces are used.

to respond to lawful requests, enforce our terms, and handle disputes.

Account record: until you delete the account, plus a short backup window (see below).

API usage ledger: 90 days.

Server logs: up to 30 days.

Source suggestions: up to 12 months after review, unless you delete your account (which removes them).

Backups: rotated on a 30-day cycle; a deleted record may persist in a backup until that cycle completes, then it is overwritten.

Where a provider processes data outside your country (for example in the United States), we rely on the provider's appropriate safeguards, such as standard contractual clauses or an applicable adequacy decision.

We share it only with service providers that help run the site, under their data-processing terms: Cloudflare — CDN, DNS, and edge security (IP address, request metadata). Postmark — transactional email and the digest distribution (email address and message content). GitHub — the public issue tracker used by the "Suggest an edit" form (the content you submit, without your email in the issue body).

the Account page's Delete account button erases the subscriber record, digest list rows, API keys, OAuth grants, usage rows, and suggestions

access the personal data we hold about you and receive a portable copy (the Account page has a Download my data button)

correct inaccurate data (you can change your name, language, and email address from the Account page)

delete your account and the data this site holds about it

restrict or object to certain processing, or withdraw newsletter consent at any time

complain to your local data-protection authority

We do not sell personal data.