Privacy Policy.

The short version

Paperstand exists so you can read in peace. That includes peace from us: we don't sell your data, we don't show ads, and we don't profile your reading to anyone. We store what's needed to run your stand — nothing more.

1. Who we are

Paperstand is operated by [Company name, legal form], [street, postal code, city, Germany]. For any privacy matter, write to privacy@paperstand.app. The data controller within the meaning of the GDPR is the company named above.

2. What we store

To run your stand we process:

• Account data — your email address, display name and password hash.
• Your stand — the newsletters delivered to your @paperstand address, your subscriptions, reading position and saved issues.
• Settings — notification schedule, aliases, language and reading preferences.
• Technical logs — short-lived server logs (IP address, timestamps) kept for security and abuse prevention, deleted after [X days].

3. What we never do

We do not sell or rent personal data. We do not show advertising or use advertising trackers. We do not read your newsletters for profiling. We do not share data with third parties except the processors listed below, and only as far as technically necessary.

4. Processors & hosting

Our infrastructure runs on [hosting provider, region — e.g. EU data centers]. Payment for Premium is handled by [payment provider / app stores]; we never see your full payment details. Data processing agreements per Art. 28 GDPR are in place with all processors.

5. Retention

On the free plan, newsletter issues are deleted three months after delivery (saved issues excepted). Premium archives are kept for as long as your subscription runs. If you delete your account, all personal data and your archive are removed within [X days], except where law requires longer retention.

6. Your rights

Under the GDPR you may request access, correction, deletion, restriction of processing, data portability, and object to processing (Art. 15–21 GDPR). Write to privacy@paperstand.app. You also have the right to lodge a complaint with a supervisory authority, e.g. the data protection authority of [federal state].