Privacy notice

Who is responsible?

Letterscout UG, Werlseestraße 65, 12587 Berlin, Germany. Contact person: Steve Buhrke. For privacy requests, email steve@letterscout.com.

Visiting the site

When you access the site, your browser sends technical data such as your IP address, request time, requested path, and user-agent. We process these data to deliver the site, troubleshoot errors, and protect it against abuse (Article 6(1)(f) GDPR). Our hosting provider is netcup; Cloudflare handles traffic at the edge. Error reports may be sent to Better Stack with sensitive request details removed where possible. Technical logs and error reports are kept only as long as needed for operations and security.

We use a necessary first-party session cookie (_letterscout_key) for login, form security, and the functioning of the site. If you choose “stay logged in,” an additional first-party remember-me cookie is valid for up to 14 days. These cookies are used for the service you request, not for advertising.

Account and email

We use your email address, password hash if you set a password, login and confirmation tokens, and account timestamps to create and secure your account and send the login or confirmation messages you request (Article 6(1)(b) GDPR). Resend delivers these transactional emails on our behalf. Account information is retained while your account exists; you can contact us to request deletion. Legal retention duties may require us to keep specific records longer.

Collections, notes, shared links, and workspace information are stored to provide the features you use (Article 6(1)(b) GDPR). Anyone with a collection's share link can view the shared content, so please do not put sensitive personal information in public notes.

Protection against automated requests

Registration and email-link login use Cloudflare Turnstile to distinguish automated requests from people. Cloudflare may process signals including IP address, TLS fingerprint, user-agent, and the site origin. We validate the resulting token with Cloudflare before creating an account or sending an account email. This protects the service and prevents abusive email traffic (Article 6(1)(f) GDPR). Cloudflare may use strictly necessary security cookies. Read Cloudflare's Turnstile privacy notice for details, including Cloudflare's own processing to improve bot detection.

We also limit account emails per recipient. For this purpose, we store only a keyed hash of the normalized email address and request times, shared across registration and email-link login. A daily cleanup removes records older than 48 hours. The purpose and legal basis are the same protection against abuse described above.

Publisher requests

If you ask us to correct or remove archived content, we store the contact email, reason, affected content, and review status that you submit. We use this information to assess and respond to the request (Article 6(1)(f) GDPR) and retain it as long as needed to document the decision and handle follow-up questions.

Usage statistics

We use Google Analytics 4 to understand visits and the use of public research features (Article 6(1)(f) GDPR). Our integration does not write Google analytics cookies or use browser storage. It creates a new random client ID for each full page load, strips search terms and URL fragments, and replaces tokens in reported paths. Google signals, personalized advertising, and user-provided data collection are disabled. Event and user data retention in the property is set to two months. We do not load the tag when your browser sends Do Not Track or Global Privacy Control. Your IP address and browser information may still be transmitted to Google when the tag loads. You can object to this processing by enabling one of those browser signals or contacting us.

Service providers and transfers

We use netcup for hosting, Cloudflare for network protection and media storage, Resend for account email, Better Stack for error monitoring, and Google for usage statistics. Data may be processed outside the European Economic Area by these providers. Their applicable privacy notices describe their processing and transfer safeguards. We do not sell account data or share it for personalized advertising.

Your rights

Subject to the applicable legal conditions, you can request access, correction, deletion, restriction, and portability of your personal data. You can object to processing based on legitimate interests. Contact us at steve@letterscout.com. You may also lodge a complaint with a data protection supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information.