Privacy.

We collect the account details you provide, including your email address, display name, profile details, and sign-in method. We also collect the reading activity you choose to add: article links, logs, Penny Ratings, rankings, Want to Read saves, Two Cents, replies, reposts, and social connections.

For safety and operation, we process device and request information. Raw IP addresses are not stored in the application database; equality-preserving hashes support rate limits and integrity checks. We use essential session data and limited product analytics.

We use this information to authenticate accounts, publish profiles and contributions according to your privacy settings, compute the Daily Five, operate social features, send requested service messages, prevent abuse, respond to reports, and understand whether the product works.

We do not sell personal information. Analytics is configured without session recording and without broad interaction autocapture.

Your display name, handle, profile fields, and public reading contributions may be visible to other people. Profile privacy controls can limit who sees your profile and whether your Daily Five and Want to Read sections appear. Articles always link to the original publisher; Press & Penny stores links and metadata, not the article body.

We use service providers to host the application and database, store profile images, deliver email, operate sign-in, collect limited analytics, and monitor errors. Those providers process data for us under their own security and privacy commitments. Google or Apple also process information when you choose their sign-in method.

Operational records have different retention periods. Notifications expire on a rolling schedule, unfinished Two Cents drafts are pruned, and safety evidence is minimized over time. Moderation snapshots retain authored content and public context only; they exclude credentials, email addresses, tokens, private drafts, private messages, and internal risk signals.

Deleting your account is immediate and irreversible. We revoke sessions and sign-in identities, remove your email and profile image, anonymize your profile as Deleted reader, reserve your handle for 30 days, remove authored content from the product, purge notifications, suppress email delivery, and request deletion of your analytics person. A one-way email hash remains solely for rate limits and abuse prevention. Past ranking rows and finalized historical editions remain as integrity-preserving records without your identifiable profile.

You can change profile visibility and email preferences in Settings and can delete your account there. Depending on where you live, you may have additional rights to access, correct, or request deletion of personal information. Privacy inquiries can be sent to privacy@pressandpenny.com.