Last updated April 19, 2026
This is the short version: we collect the minimum we need to run the product, we don't sell your data, and we don't track you around the web. If anything below sounds off, email hello@aggregated.info.
Account data. Your email address (for login or waitlist) and — if you sign in with Google — your name and profile photo. Authentication is handled by Supabase.
Product data. Bookmarks you save, cards you mark as read, and quiz results. Some of this is stored in your browser (localStorage); bookmarks are stored on our server against your account.
Payment data. If you subscribe, Stripe processes the payment. We never see or store your card number. We store a Stripe customer ID and your subscription status so we know whether to unlock paid features.
Logs. Our hosting providers (Vercel, Supabase) keep standard request logs — IP, user agent, timestamps. These are used for security and debugging and are deleted on their standard retention schedules.
No third-party advertising trackers. No Google Analytics, Meta Pixel, or equivalent. We don't sell or rent your email or data to anyone. We don't build behavioral profiles for ad targeting.
A small number of subprocessors, each with their own privacy policy:
We don't share your data with anyone else except where legally required.
You can delete your account and associated data at any time by emailing us. If you're in the EU or UK, you have rights under GDPR (access, correction, deletion, portability, objection). In California, you have rights under CCPA. To exercise any of these, email hello@aggregated.info.
We use cookies only for what the product needs to work — keeping you logged in, remembering preferences. No advertising or analytics cookies.
The product isn't intended for anyone under 16. We don't knowingly collect data from children.
If this policy changes materially, we'll email registered users before the change takes effect.
The data controller is Aggregated, a sole proprietorship based in Switzerland. All data-protection requests, including GDPR access / deletion / portability requests under Art. 15–22, can be sent to the contact address below. We aim to respond within 30 days.
Questions or requests: hello@aggregated.info.