Privacy Policy
Quelle is an RSS feed reader built with privacy in mind. We collect the minimum data needed to run the service and nothing more. This policy explains what we collect, why, and your rights under the UK GDPR and the Data Protection Act 2018.
Who is responsible for your data
Cognitio.space acts as the Data Controller.
Registered address: 85 Birchwood Way, Dumfries, DG1 3GT
Contact: [email protected]
What we process and on what basis
We rely on three lawful bases depending on the type of data:
Contractual Necessity: Your email address is required to create your account and to send magic login codes for passwordless authentication. Your feed subscriptions and read state are stored to provide the service you signed up for.
Legitimate Interests: We retain server logs and IP addresses for a limited period to protect against fraud and abuse.
Consent: If we ever send marketing communications, we will only do so with your explicit opt-in. You can withdraw consent at any time.
We do not profile users, serve advertising, or track browsing behaviour.
Third parties
The following services help us operate Quelle. Your card details go directly to Stripe and never pass through our servers.
| Service | Role | Location |
|---|---|---|
| Stripe | Payments & billing | USA (SCCs in place) |
| Hetzner | Server infrastructure | Germany |
| Resend | Transactional email | USA |
Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs).
Cookies & tracking
Quelle uses a single session cookie to keep you signed in. We do not use analytics, tracking, or advertising cookies of any kind.
How long we keep your data
Your account data and feed subscriptions are kept for as long as your account exists. When you delete your account, personal data is removed from our systems within 30 days. Magic login codes are short-lived and deleted immediately after use or expiry. We retain billing records for 6 years in line with HMRC requirements.
Children
Quelle is not intended for anyone under the age of 13. If you believe a child has created an account, contact us at [email protected] and we will delete it promptly.
Your rights
The UK GDPR gives you the right to access, correct, delete, or export your personal data. You can also object to or restrict how we process it. To make a request, email [email protected] and we will respond within 30 days.
If you believe we have mishandled your data, you can raise a complaint with the Information Commissioner's Office (ICO).