Privacy policy

InMyNews is a news email. We keep as little about you as we can, we never sell it, and we never send anything that identifies you to an AI. This page explains what we hold, why, and what you can do about it.

Who we are

InMyNews (inmynews.com) is run by Yoshi Hospitality Ltd., 83rd str. N19, Sofia 1434, Bulgaria. We are the controller of your personal data. For anything about your data, write to [email protected]. Our company details are in the imprint.

This website today

InMyNews has not launched yet, so this website has no signup form and asks you for nothing. We set no cookies and use no analytics or tracking.

Like any website, our server and Cloudflare, which protects the site, record technical details of each visit: your IP address, the page you asked for, your browser type and the time. We use these logs only to keep the site secure and working, and keep them for no longer than 30 days. Cloudflare may sometimes set a strictly necessary security cookie to tell people from automated traffic; it is not used to track you.

What we will hold once signup opens

When you sign up for InMyNews, we will hold:

• your email address;
• your first name, your country and, if you give it, your city (for local news);
• your choices: topics, your own interests in your words, whether you want the day’s essentials, how often you want the newsletter, and any pause;
• your time zone, detected by your browser, so the newsletter arrives at 7:00;
• a record of your consent: the time you signed up and confirmed, your IP address, and the version of the signup form and wording you agreed to;
• delivery events: whether each email was delivered, bounced or marked as spam, and whether you opened it. Our newsletters contain a small image that tells us when an edition is opened. We do not track which links you click;
• any email you send us, such as a reply or an error report.

You must be 16 or older to sign up.

Why we use it, and on what legal basis

• To send you the newsletter you asked for: your consent. You can withdraw it at any time with the unsubscribe link in every email; we stop at once.
• To prove you gave consent, and never to email someone who asked us not to: our legitimate interest and our legal duties under data protection and email marketing rules.
• To know whether you open our newsletters: your consent, which you give when you sign up. We use it to see whether InMyNews is useful and to stop writing to people who no longer read it.
• To keep the website and our emails secure and working: our legitimate interest.
• To answer your emails: our legitimate interest in helping you.

AI and your data

We use the Claude API from Anthropic to choose and summarise news stories. We send it news articles and, once signup opens, the interests you type in your own words, to check they are suitable. We never send your email address, your name or anything else that identifies you. Each newsletter is put together from the summaries by our own software on our own server. Anthropic may process what we send it outside the EU.

Where your data is stored

Our server and database are in a data centre in Germany, in the EU. Encrypted copies of the database (backups) are stored in the EU, as described under Cloudflare below.

Companies that help us

These companies process data for us, only to provide their service:

Hostinger

Runs the server in Germany that holds our website and database.

Cloudflare

Delivers and protects our website and manages our domain. It sees your IP address and the pages you request, and may process them outside the EU. It also stores our encrypted nightly database backups in the EU, kept for 30 days and then deleted.

Amazon Web Services (Amazon SES)

Sends our emails from its Frankfurt data centre (Germany). It receives your email address and the content of each email, and tells us about deliveries, bounces and spam complaints.

Google (Google Workspace)

Hosts our mailbox, so it holds any email you send us.

We use each of them under their data processing terms, which include the safeguards the GDPR requires when data leaves the EU, such as the European Commission’s standard contractual clauses.

These services never receive anything that identifies you:

Anthropic (Claude API)

Receives news articles to choose and summarise and, once signup opens, the interests readers type in their own words, as described above.

GNews

Supplies us with news articles. Once signup opens, we will search it with the keywords of interests readers type in their own words, never with anything that identifies you.

If we add website statistics, we will use Umami running on our own server: it sets no cookies and does not identify you.

How long we keep it

• If you sign up but don’t confirm your email, we delete your details after 7 days.
• While you are subscribed, we keep what you need for your newsletter.
• When you unsubscribe, we stop emailing you at once and delete your details within 30 days. We keep the record of your consent for up to 3 years, to show we had your permission.
• If you ask us to delete your data, we delete all of it. We keep only a scrambled (hashed) copy of your email address on a do-not-email list, so we never write to you again.
• If an email to you bounces because the address does not exist, or you mark one of our emails as spam, we stop at once and keep the same scrambled copy on the do-not-email list permanently.
• Backups: 30 days.
• Website and security logs: no longer than 30 days.

Your rights

You have the right to:

• see the data we hold about you, and get a copy in a format you can reuse;
• have it corrected;
• have it deleted;
• object to how we use it, or ask us to limit it;
• withdraw your consent at any time, which ends your subscription.

Every newsletter will include links to change your choices or unsubscribe. For anything else, write to [email protected]. It is free, and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Bulgarian Commission for Personal Data Protection (CPDP, cpdp.bg) or to the data protection authority in your own EU country.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects what we do with your data, we will tell subscribers by email first.