How we handle your data

1. Who we are

The Byte-sized is an indie product studio based in Italy. You can contact us at: hello@thebyte-sized.com

2. Data we collect

We only collect data strictly necessary to provide our services:

• Email address — when you provide a Reading List Sync Identity, subscribe to Weekly Digest reminders, consent to a separate Content Broadcast or Planner Resource Delivery flow, or contact us via the contact form.
• Reading list — articles you save to your reading list (slug, title, excerpt, reading time, save date, read date). Local Copy data is stored in your browser localStorage. If you provide an email for sync, the browser may keep that normalized Sync Identity locally; the Cloud Copy is stored under a SHA-256 hashed key and contains the versioned article copy, not a raw email field by default. Weekly Digest subscriptions are stored separately in the Subscriber Store because email delivery requires a raw email address.
• Contact form data — name, email, inquiry type, message, optional timeline/budget context, consent, and visible non-sensitive planner handoff hints when you contact us.
• Planner Browser State — planner answers and restore scope (slug, version, locale) saved in your browser localStorage so the planner can restore progress in this browser. Contact form submissions, email drafts, free-text drafts, and resource unlock state are handled separately from this browser state.

We do not collect browsing data, do not use tracking cookies, and do not sell your data to third parties.

3. How we use your data

• Reminder emails — if you subscribe to the Weekly Digest, we use your email to send unread-article reminders for your reading list. Content Broadcast emails and Planner Resource Delivery are separate scopes and require their own consent or delivery flow.
• Sync — we normalize the email you provide as a Reading List Sync Identity and derive a SHA-256 key for Cloud Copy lookup. Syncing a reading list does not create a Weekly Digest subscription.
• Contact replies — we use contact form data solely to respond to your inquiry.

4. Legal basis (GDPR)

Processing of your data is based on:

• Consent (Art. 6(1)(a) GDPR) — for Weekly Digest reminders and for any separate Content Broadcast or Planner Resource Delivery flow that asks for email delivery. You can withdraw email consent through the unsubscribe link or by contacting us.
• Legitimate interest (Art. 6(1)(f) GDPR) — for responding to contact requests.

5. Data retention

We retain your data as long as needed for the purpose you gave it to us or until you request deletion. Contact form data is retained only for handling and following up on your inquiry. Reading List Local Copy stays in your browser until you clear browser storage; Cloud Copy article data is retained for sync unless you request deletion. Reminder Subscriber records keep the raw email, Weekly Digest scope, unsubscribe token, and delivery timestamps needed for email delivery and are deleted within 30 days of unsubscribing or a deletion request. Planner Browser State stays in your browser for the planner retention window unless you reset it or clear browser storage.

6. Your rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with the supervisory authority

To exercise these rights, contact us at: hello@thebyte-sized.com

7. Third parties

We use the following third-party services to process your data:

• Cloudflare — hosting, CDN, secure data storage (R2 Cloud Copy and KV Subscriber Store), rate limiting, and anti-spam challenge verification. Cloudflare is GDPR compliant.
• Resend — transactional email delivery for contact replies, Weekly Digest reminders, and any separately consented Content Broadcast or Planner Resource Delivery email. Resend is GDPR compliant.

We do not share your data with any other third parties.

8. Cookies

This site does not use tracking or profiling cookies. Browser localStorage is used for Reading List Local Copy, including saved/read article facts and an optional Sync Identity, and for Planner Browser State, so saved articles and planner progress can remain in this browser.

9. Changes to this policy

We may update this policy periodically. Significant changes will be communicated via email to subscribers.