Privacy Policy
Effective date: January 29, 2026
What we collect
We collect only what’s needed to run nthreader. Here is exactly what we collect.
- Email address
- Password (stored as a hashed value)
- Billing / plan status (e.g., tier and usage limits)
- Recipient email address (stored as a salted hash or otherwise stored securely)
- Timestamp of an open event
- Open order / position number (e.g., “you were the 7th to open”)
- User agent (email client type) when a Signal is requested
- IP address (only if present in infrastructure logs; we do not store IP addresses in the Signal event database)
- Messages you send to our support email and our replies
What we do not collect
- No email content
- No inbox access
- No contact lists
- No behavioral tracking outside the email open (Signal request)
How we use the data
- Generate open position (e.g., “how many opened before me”)
- Display Signals inside emails (via an image request)
- Provide analytics to the sender (aggregate Signal activity)
- Prevent abuse and fraud and enforce usage limits
- Improve service reliability and troubleshoot issues
How recipient data is handled
Recipient data (e.g., recipient email hashes and open timestamps) is collected on behalf of the sender. In this context, nthreader acts as a data processor and the sender is the data controller / owner of the recipient list.
- We use recipient data only to generate the Signal and related sender analytics.
- We do not market to, sell, or reuse recipient data for unrelated purposes.
- We do not attempt to identify recipients beyond the hashed identifier needed for de-duplication.
Storage & security
- Data is stored and processed using Cloudflare infrastructure.
- Access is restricted to authorized systems and personnel.
- We use reasonable technical and organizational safeguards appropriate to the sensitivity of the data.
No method of transmission or storage is 100% secure, but we work to protect your data.
Retention
- Signal data is retained while the sender account is active.
- Senders may delete Signals at any time, which disables future tracking for that Signal.
- After account deletion, we delete or anonymize account and associated Signal data within 30 days, unless we must retain it longer to comply with legal obligations or resolve disputes.
Third-party services
We use third parties only to provide the service. They process data on our behalf.
- Hosting & infrastructure (Cloudflare Pages / Workers, storage, and databases)
- Payment processing (if you purchase a paid plan; we do not store full payment card numbers)
- Email delivery (if we send account emails)
Your rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal data. To make a request, contact us.
If you are an email recipient (not a sender), requests about recipient data should generally be directed to the sender who contacted you.
Policy updates
We may update this policy from time to time. If we make material changes, we’ll update the effective date and may notify account holders via the app or email.