Privacy
What Boring stores, why, where it is kept, and how to have it removed.
Boring by email
When you sign up for Boring by email, we store your email address with Resend, the service that sends our email, and send you one email with a link to confirm. If you don’t confirm, we send one reminder two days later, then nothing else, and we delete your address after 30 days. For the reminder, we keep a code made from your address, never the address, with the list you chose and when you signed up, until you confirm or the 30 days end. Once you confirm, Resend keeps your address on the list you chose, every morning or Saturdays only, and you get that edition until you unsubscribe, which every email lets you do in one click. Every email also has a link to switch to the other list; switching asks you first, then moves your address.
You can also sign up from a form in one of our ads on Facebook or Instagram. The form asks only for your email address, which Meta keeps under its own privacy policy and sends us as soon as you send the form. We then send you the same email with a link to confirm, right away, and it works as above: nothing more comes until you confirm, and if you don’t, we delete your address after 30 days.
Your first name, if you give it, so our emails can greet you. When you sign up by email, Resend keeps it with your address; on your account page or in the app, we keep it with your account. We use it for nothing else. It is in your copy of your data, and deleted when you delete your data or your account.
When you leave the daily email, or choose Saturdays only, Resend also keeps a note that your address doesn’t want the daily email, so we don’t send it to you. Signing up for it again, or switching back to every morning, removes that note.
You can pause our emails for 1, 2 or 4 weeks, or until a date up to 3 months away: from Emails and texts on your account page or in the app, or with the link at the bottom of every email. While they’re paused, we keep the day they start again and a code made from your address with a secret key (an HMAC), never the address itself. We delete both 14 days after your emails start again, on their own or because you started them. In those 14 days we don’t ask you “Is Boring working for you?”, since you weren’t getting our emails. Both are in your copy of your data.
When you unsubscribe, you can tell us why, if you like: a reason and a short note, kept with your email address in our feedback, for the team only. You never have to: the button unsubscribes either way. 21 and 90 days after you join, we email you once each time to ask how Boring is working for you, and if you seem to have stopped reading (below), we may ask once whether it’s still useful, at most once every six months. Your answers are kept the same way.
We ask once, by email or when you confirm, eight optional questions about how you follow the news, and keep your answers for 24 months by a code made from your address, never the address, unless you say yes to a short call: then we keep your address with them for that, for 12 months at most, until you change that answer, unsubscribe or delete your data.
If you haven’t opened Boring in a while, by email or in the app (which decides that on your phone and sends only your answers), we may ask two quick questions, at most every six months, and keep your answers for 24 months by a code made from your address, never the address; “Your data” has your answers.
Whether you open our emails
We can see whether you open our emails and click their links. We count this ourselves; the service that sends our email doesn’t track it.
Every daily and weekly email carries a tiny image, and its links to our own pages go through our site first, which then takes you to the page. When the image loads, or you follow a link, we count it for that edition: an open once a day for each connection, and a click once a day for each connection and link, using a code made from the connection that is thrown away after a day. For each edition we keep only totals, which never say who.
For some readers we also keep their own activity, by a code made from their email address with a secret key (never the address itself): when you first opened one of our emails or clicked one of its links, the last time you did each, and on how many of your first 21 days you did. That tells us when Boring stops being useful to someone, so we can ask why.
In the EU, the EEA, the UK and Switzerland, we do this only if you turn it on. Everywhere else, we do it unless you turn it off. If we can’t tell where you are, we don’t do it. We tell from where your request comes from (our host’s estimate of your country) when you confirm, and when you use a button on a page an email’s link opened, and we keep only which of the two you are, never your country. Once you’ve been seen in the EU, the EEA, the UK or Switzerland, we treat you as being there.
To turn it on or off, use the Opens and clicks link at the bottom of any Boring email, or, signed in, Privacy and data on your account page. Turning it off deletes what we kept of your opens and clicks, and so does unsubscribing. We keep these times for at most 13 months, and your record goes 13 months after we last emailed you.
Some mail apps change what we see. Apple Mail loads every image when an email arrives, read or not, so you may look as if you opened every email. If your mail app blocks images, you may look as if you never open them, though you read every one.
The waitlist
When you sign up for launch, we store your email address and when you signed up. We use it to email you once, when Boring launches.
Accounts
An account is free. You can make one in the app, or on the Account page with a password or with a code we email you. Your password goes only to Supabase, which runs our sign-in, and it keeps your password hashed: scrambled so it can’t be read back, by Supabase or by us. Boring never sees or stores your password. An account opens past editions on the website; today’s edition and every story’s own page are open to everyone. We store your email address and, from the app, the categories you follow and the notes you write.
You can also make an account, or sign in, with Apple or Google. They confirm it’s you and send Supabase, which runs our sign-in, your email address and their own ID for you. Google also sends your name and the address of your profile picture, and Apple may send your name the first time you use it on this site (the app never asks Apple for it). Supabase keeps what they send with your account; Boring doesn’t use your name or picture from them. If an account already has the same email address, you sign in to that account. If you choose Apple’s Hide My Email, your account’s address is the private address Apple makes for Boring, and our emails reach you through it. With Apple, we also keep a token Apple gives us, for one use: when you delete your account, we tell Apple to end your Sign in with Apple for Boring. It’s all in your copy of your data (the token itself isn’t shown), and deleted with your account. Apple and Google handle signing in with them under their own privacy policies.
A new account gets 14 days of the extras free, once per address. To give them only once, we keep a record that your address had them, by a code made from the address with a secret key (an HMAC), never the address itself, with when they began and ended. That record stays after you delete your account, so a new account with the address doesn’t get them again. Your copy of your data shows it, without the code.
In October 2026, every account that wasn’t paying got 14 days of the extras. We keep a record of that the same way: by that code, with your account until you delete it, with when the 14 days began and end, and whether your account already had the extras then, so we send you the daily email only if you asked for it. It stays after you delete your account, so a new account with the address doesn’t get a new account’s free days. Your copy of your data shows it, without the code.
If you choose when your daily edition arrives, we store the time and the time zone you chose with your account, to schedule your daily email and the app’s morning notification for then. A time zone says roughly where you are, so it’s yours to pick: the app and this site suggest your phone’s or browser’s, and nothing is kept until you save. Clear it on your account page or in the app’s Settings, and your edition comes at the usual times. If the extras that let you choose a time end, we keep it, unused, until you clear it or delete your account. It is in your copy of your data, and deleted with your account. Our log of each morning’s send keeps only how many emails went at each time, never who.
If your account includes the extras, you can save stories, in folders you name, and highlight words in a story with a note. We keep them with your account: each story’s ID, the version you saved and its headline, your folders’ names, and each highlight’s words, where they are and your note. Only you can read them. We never publish, count or share them. If the extras end, we keep them so you can still read and remove them, until you delete them or your account. In the app, a save made offline waits on your phone until it reaches your account. They are in your copy of your data, and deleted with your account.
“Start with good news” is on for every account until you turn it off in Your edition or in the app. We keep that choice with your account, so your daily email follows it. It is in your copy of your data, and deleted with your account. Whether you’ve seen the line that explains Good news is kept in your browser or on your phone only, never sent to us.
“Fold away topics” is kept in your browser or on your phone only, never sent to us. It folds stories only for you, on that device. If you fold a topic for the day in the app, your phone counts those days, and only your phone: after a few, it may ask once whether to fold that topic by default, and nothing changes unless you say yes.
“Your edition” is how many stories you get, your city for stories near you, within 50 or 100 miles, and whether you fold away stories about deaths and disasters or turn off Around the world. Signed in, we keep them with your account, so your daily email follows them: the city, as its number on the list of cities, the distance, the number of stories and those two choices, and whether that fold stays free for you because you turned it on before November 6, 2026. Signed out, they stay in your browser or on your phone, never sent to us. Your browser or phone works out which stories are near your city; we never learn which you read. It is in your copy of your data, and deleted with your account.
“Your city” is one city you choose, for stories near you and for local news. “Other cities” are up to 5 more you follow, for the same. Signed in, we keep them with your account, each as its number on the list of cities, so your daily email follows them. Signed out, your city stays in your browser or on your phone, and other cities need an account. We count how many readers chose each city, never who. They’re in your copy of your data, and deleted with your account.
“Count the days I read” keeps the dates of the editions you opened a story in or heard most of the audio edition of, for 8 days, when your count began, and how many editions you’ve read since then, with your account if you’re signed in and in your browser or on your phone if you’re not, to show you how many of the last 7 you’ve read and how many in all. How much of the audio edition you heard is worked out on your phone or in the page, and only the edition’s date is sent to us. Our team sees only how many readers read how many, never who, and we never use it to choose, rank or send you anything. In the EU, the EEA, the UK and Switzerland, your browser or phone keeps it only once you agree to counting (see counting). Turning it off under Privacy and data on your account page, or in the app’s Settings, deletes it.
When you sign in on the website, your browser keeps your sign-in in its own storage, not a cookie. It lasts 30 days from when you sign in, unless you untick “Remember this device for 30 days”: then it ends when you close the tab. Signing out ends it at once.
Where you vote
If you choose to, your account keeps the state, county and congressional district where you vote. We use them for your local elections, and we count how many readers are in each state, county and district to decide where to cover elections. The team sees only those counts, and a county or a district only once at least 5 readers are in it. Never who.
To find them from your address, the app sends your address straight to the US Census Bureau’s geocoder, and this site sends it there through our website, which passes it on and keeps nothing. Either way, Boring never stores or logs your address. The Census Bureau handles it under its own privacy policy. The state legislative and school districts it finds are shown to you once and never kept. You can choose from lists instead: that sends only which state, to fetch its counties.
While you type an address here or for your ballot, on this site or in the app, what you’ve typed goes through our website to Google, which suggests matching addresses. Google handles it under its own terms. Boring never stores or logs it, and choosing a suggestion only fills in the box.
Change or remove it under Where you vote on your account page or in the app’s Settings. It is in your copy of your data, and goes when you remove it or delete your account.
If you have an account and haven’t saved where you vote, then 8 weeks before an election in your city’s state, Saturday’s email and the app remind you that you can. For that, our daily email reads which accounts haven’t saved it and the state of their city, and uses them only for that morning’s send. The app keeps which elections it already reminded you of on your phone, never sent to us. Everyone in a state gets the same reminder.
Your ballot
When you look up your ballot, the address you type goes, through our website, to Google’s Civic Information service, which answers with the official election data for it. Google handles it under its own terms. It also goes to the US Census Bureau, which says which county and districts it’s in, so we can show the races on your state’s own candidate list until Google’s data has them. Only those districts go on to our database, for that one answer. Boring never stores or logs your address or your ballot, and anyone who types the same address sees the same ballot. You don’t need an account.
Save my county, for a signed-in reader, sends the address once more, to the US Census Bureau, and keeps only your state, county and congressional district, as above.
What a ballot lists is kept by race, never by reader: each race and its candidates, as the official data names them, with how many lookups found it and a code made from each connection and the day (an HMAC, kept two days), so a lookup counts once a day. This comes to Boring through Google, whose terms let us keep it for a day after the lookup that last gave it, so that’s how long we keep it. Then it’s deleted. A candidate’s profile keeps only what comes from sources we may keep: their own pages, their answers, federal filings, states’ candidate lists, Congress’s member records, our own stories, Wikidata and Wikimedia Commons.
If you turn on reminders for your county, your account keeps that choice, and your daily email and the app remind you of your county’s own election dates. Everyone in a county gets the same reminders. To get them, the app asks Boring’s website for your county’s dates, sending only the county, and sets them on your phone. Turn them off on your account page or in the app’s Settings. The choice is in your copy of your data, and goes when you remove where you vote or delete your account.
If you’re a candidate
Boring sends every candidate in a race it covers the same questions, by email, only to the address on your official filing (such as your campaign committee’s with the Federal Election Commission) or in the official ballot data your election office publishes. We never look for an address anywhere else. We send one invitation and, if you haven’t answered, one reminder a week later, and nothing after that. An address from your filing we keep, with your race and when we wrote, until 90 days after the election, then delete it. An address that only the official ballot data gives us, through Google, we keep only a day: we send the invitation within it. After that we keep only a code made from it (an HMAC) and a record that we wrote, so you can stop the emails and we never add it again. The reminder goes only if the ballot data gives us your address again.
Your answers are published, as you wrote them, once someone at Boring has read them. If we don’t publish them, we email only you the reason. A newer answer replaces the published one, and the earlier one stays listed, dated. Answers are kept until 90 days after the election.
Every email has a link to stop them. Stopping deletes your address from our list, and we keep only a code made from it (an HMAC), so we never add it again. You can take your answers down at the same time. To see or delete everything we keep about your address, use the Your data page, or write to us.
Texts
If you sign up for Boring by text, your account keeps your mobile number, the first name you give, if any, how often you want texts, your time zone, the wording you agreed to and when, and when you confirmed the number. For each text we keep its day, whether it went, and the error code if it didn’t, for 30 days. Twilio sends the texts, and the code that confirms your number, under its own privacy policy. Twilio checks that code: we never see it.
We use your number only to send these texts. We never sell or share your number, or that you agreed to texts, with anyone for marketing. If you pause your texts, we keep the day they start again with them. Reply STOP to any text, or press Stop texts on your account page or in the app, and they stop at once. We delete your number 30 days after you stop. It is in your copy of your data, and goes when you delete your account.
Share links
Every reader has their own share link. Its code is random and says nothing about who you are. When someone new signs up through it, they get a free week of extras, and once they’ve stayed 14 days its owner gets a free month. We record that a sign-up came through that link, and whether the month is still waiting, was given or wasn’t (and why: they left within 14 days, or the sign-up didn’t count). We keep it, and any free time it earns, by a code made from each email address with a secret key (an HMAC), never the address itself. To check whether a friend shares your email domain (the part after the @), we keep a code made the same way from your domain, and from theirs only when it may be yours; never the domain itself. If they leave our email list or delete their account within 14 days, we note that the month won’t come and which of the two it was, nothing more.You see how many people signed up with your link, never who. When someone does, the app tells you once, the next time you open it, with how far your next free month is and the free time you’ve earned and have left; to tell you only once, on whichever phone, we keep when it last told you, by the same code. If they arrived through your link, they don’t learn who you are from us either. While you look around after following someone’s link, your browser keeps its code for that visit only, in session storage, not a cookie.
Sharing stories
When you share a story with its Share button, in the app or on this site, we count it once a day toward that story’s own share total, as we count opens (see counting): by the story alone, never who shared it. A link you share carries your share link’s code when we know it (you’re signed in, or you opened the story from our email, whose links to a story carry your code after the # in the address, a part our click count never sees), so a friend who signs up through it counts toward your free months. Every story link shared from Boring also says it was shared (“ref=shared” in the address), so we can count how many people open shared stories and sign up from them, never who.
Your phone or browser also keeps its own list of the stories it shared: each story’s headline, its edition’s date and how many times, at most 500. It stays on the device and is never sent to us. It’s for a year in review we may build later. In the EU, the EEA, the UK and Switzerland, it keeps the list only once you agree to counting, and saying no deletes it. To clear it, clear this site’s data in your browser’s settings, or remove the app.
Signed in, you can turn on “Remember what I share, for my year in review in December” under Privacy and data on your account page, or in the app’s Settings. It’s off until you turn it on. While it’s on, each story you share is also saved to your account: the story, its edition’s date and how many times you shared it. Nothing else. Only you can see it, and it’s in your copy of your data. Turning it off deletes it, and so does deleting your account.
Feedback
When you send feedback, we store your message, your email address (or, in the app and on the community board, your account) and the page or story you sent it from. Only the Boring team reads it. The team’s dashboard, on the web and on its own phone app, shows what you wrote and where you sent it from, never your email address or account. It is deleted with your account, or when you delete everything about you (see Your rights).
A topic you suggest for Boring to follow is feedback too, kept the same way.
The community board
The community board holds readers’ ideas, bug reports and the feedback they choose to post publicly, and comments on the ideas and bugs. Posting, commenting, voting, reporting, flagging and hiding an author need a free account.
When you post, we store your post (what kind it is, its title and its text) with your account, when you posted it, and where it stands: waiting, published, not published or removed, with the team’s reason, which only you see. For a bug report we also store the browser or app version you give: from the app, the app’s version and your phone’s system and its version, which the form shows you, and you can change, before you post (never your phone’s model or anything else that tells it apart). Every post is read by the Boring team before it appears. Published posts are shown to everyone, never with your name or email address; a bug report’s browser or app version is for the team only. Feedback you don’t post publicly goes where all feedback goes (see Feedback, above).
When you vote for a post, we store your vote with your account: everyone sees how many votes a post has, never who gave them. When you report a post, we store your report, its reason and any note, with your account: only the Boring team reads reports, and the author is never told who reported them. When you hide an author, we store that with your account so the board can leave out their posts and comments for you; nobody else sees it, the author included.
When you comment on an idea or a bug, we store your comment with your account, when you wrote it, and where it stands. Comments appear at once, never with your name or email address. A comment that uses a word from our short list of slurs waits for the team before it appears. When you flag a comment, we store your flag, its reason and any note, with your account: only the Boring team reads flags, and nobody is told who flagged. A comment flagged by 3 readers is hidden until the team reviews it. If the team removes your comment, or hides all your comments, you see their reason; nobody else does. A removed comment and its reason are deleted 90 days after it was removed.
We keep your posts, comments, votes and hidden authors until you delete them or your account. We keep your reports and flags until the post or comment goes, or your account does. Deleting a post deletes the comments on it. You can delete any post or comment of your own from its page, at any time. Nothing on the board is sent to an AI model.
Check it with Boring
When you check a claim, what you paste (a claim, a headline, or a link and the headline and description of the page it opens) goes to Anthropic, which makes Claude, the AI that writes the answer. Anthropic handles it under the commercial terms of its API. Boring never stores or logs what you paste, or the answer: it shows in your browser, and Copy summary copies it there.
For a link, our website opens the page and reads only its headline and description. The site sees our website’s request, not yours.
We keep only how many checks your account made each month, and on the last day you checked, to count your checks. Each month’s count goes once the next month ends, or with your account. Each day’s number of checks and what they cost are kept as totals, never with who checked or what.
The weekly vote
When you vote on what Boring builds next, we store your email address and your choice in each round. Nobody outside the Boring team sees who voted for what. Once a round closes, we publish its totals on the vote page, never individual votes.
Which features you would use
If you answer “which of these would you use?” after confirming your sign-up, or from a link in our emails, we store your email address, the features you ticked and, if you choose one, your city. Signed in, on this site or in the app, we store it with your account instead. Each answer replaces the last. We use it to decide what to build next. Only the Boring team reads it.
You choose your city from a list of the world’s cities as you type. What you type goes to our website to search the list, and isn’t kept. City names from GeoNames (geonames.org), CC BY 4.0.
The emails ask only readers who haven’t answered: before each send, we check whether your address has. Their link carries your address after a “#”, which your browser doesn’t send to us. “Not now” on the question’s card is kept in your browser only.
Polls
Each week, Boring’s emails can ask up to three questions about the week’s stories: all of them in Saturday’s weekly email, one at a time in the daily email. When you answer one, we store your email address and your answer to that poll; you can change it until the poll closes on Friday night. Nobody outside the Boring team sees who answered what. Once a poll closes, its results are published only as totals, on the polls page and in the next Saturday’s email, never individual answers.
About you
The About you page, reached from the link in any Boring email, asks five optional questions: your age range, where you live (your US state, or your country), your political leaning, your gender and your marital status. Each one has “Prefer not to say”.
We keep your answers, with your email address, only if you tick the box that says Boring may use them in anonymous totals. Without it, nothing is kept. They are used, one question at a time, to break down poll results and to see which topics different readers follow, and a group is shown only when at least 30 people in it answered. Only the Boring team sees the topic totals. Answers saved before 6 October 2026 were given for poll results only, so we use them only for that until you save the page again. Places are shown only as large regions, never your state.
Political leaning is sensitive information, so skip it, or any question, if you like. If you’re under 18, please skip these questions.
To change your answers, use the About you page again. To delete them, save the page with the box unticked, or write to the contact address below.
Boring for Journalists
When you fill in the form on the Boring for Journalists page, we store your answers: your name if you give it, your email address, what you do, the link to your work, what takes up your time and your pain points, the tools you use, whether you’d try an early version, whether you asked for our plans and updates, and when you sent it. We keep your address so we can write back to you about the tools we’re building.
Only the Boring team reads your answers. They are never published, and we use them only to decide what to build and to get in touch with you about it.
If you ask for our plans and updates, we first send one email with a link to confirm. Once you confirm, your address joins our Boring for Journalists list, which we keep in our own database, and you get our plans and occasional updates, sent by Resend, the service that sends our email. Every one of those emails lets you unsubscribe in one click. When you do, we keep a note that you left and when, so we don’t email you again unless you sign up again.
To have your answers deleted, email boringnews.hello@gmail.com. You can also delete them yourself, with everything else: see Your rights.
The weekly show
The weekly show is an audio file made with AI voices from the week’s stories, after they have been checked against their sources. ElevenLabs’ text-to-speech voices it, and OpenAI’s checks that each part says its words (OpenAI’s voices stand in when ElevenLabs’ can’t). Only the stories are sent to ElevenLabs and OpenAI, never anything about readers. Today’s audio edition is made the same way. It plays for readers whose account includes it: on this site, your browser asks Supabase, where the show is stored, with your own sign-in, for an address to the file that works for an hour.
A reader whose account includes it also gets their own private podcast feed, for a podcast app. Its address carries a random code tied to your account in our database, and our website’s signature on it: never your email address. We keep that code with your account, with when it was made and when you last reset it. Your podcast app (and, for many apps, the company that makes it, whose servers fetch the feed) holds the address, under its own privacy policy. It carries today’s audio edition, for two weeks after each day’s, and the weekly show. Anyone with the address can follow the feed while your account includes them, so keep it to yourself; “Reset link” on the Listen page makes a new one, and the old one stops working at once. Each episode’s download goes through our website, which checks the feed and your account, counts the download as below, then sends the app to the file. Deleting your account deletes the code. Your copy of your data says when it was made and reset, but not the code itself, which is half of your feed’s address.
Counting visits and sign-ups
To know whether Boring is reaching people, we count page views with Vercel Web Analytics, the analytics of the service that hosts this site. It sets no cookies and stores nothing on your device. For each page view it records the page’s address, the site you came from, roughly where you are (country, region and city) and your browser, device type and operating system. It tells visits apart with a code made from the request that is thrown away after 24 hours, never with your IP address or anything that follows you to other sites. We see only totals, and we strip everything after the “?” in a page’s address before it is sent, apart from a link’s source label (such as “?ref=youtube”), so no email address or link token from our emails ever reaches it.
To show how many readers Boring has as it grows, on this site and in the app, we keep whether each email address is on our email lists by a code made from it with a secret key (an HMAC), never the address itself, and count those codes with our accounts. Only the number is shown. When you leave our email, your code is marked as gone and deleted the next morning.
When you sign up for, confirm or leave an email edition, we also count it: the day, which edition, and where you signed up (such as the home page, or a link with a source label). When you confirm or leave, the count also says whether you were new to Boring, already on our email, or have an account: we check your address for that and keep only the answer. The count doesn’t include your email address or IP address.
We also count how Boring is used, to see whether it’s useful enough to come back to: how many people open it each day, how long they spend reading or listening, and on how many days a week. We count this without knowing who you are. This site (and the app) keeps the day’s counts in your browser’s or phone’s own storage, not a cookie, and sends only those counts: never your email address, an account, an ID, or which pages you read. We keep only totals for each day and week. When you open a story, it is counted once a day toward that story’s own total, by the story alone: the counts never say who opened it or what else they read.
When you finish the day’s quiz, we count it once, toward that quiz’s own totals: its date and how many you got right. Never which answers you chose, and never who you are. Your answers stay in your browser or on your phone, so you see your score again if you come back. Where we ask before counting, they’re kept only once you agree, and saying no deletes them.
When you start the day’s Sudoku, we count it once, toward that puzzle’s own totals: its date and level. When you solve it, we count that once too, with your time. Never your board, and never who you are. Your board and time stay in your browser or on your phone, so you can pick up where you left off. Where we ask before counting, they’re kept only once you agree, and saying no deletes them.
In the EU, the EEA, the UK and Switzerland, this site and the app ask first, and count nothing until you agree; your answer is the one thing kept to remember it. Anywhere, you can turn counting off: in the app under Settings, Privacy, and for this site here, or under Privacy and data on your account page:
When a podcast app downloads an episode (today’s audio edition or the weekly show), we count the download once a day for each connection, using a code made from the connection that is thrown away after a day. We keep only how many downloads each episode had: never whose feed it came through.
Limits on our forms
So that nobody can use our forms to flood someone’s inbox, each request to them is counted against a limit. The count is kept under a scrambled code made from the IP address the request came from and, for sign-ups and emailed links, the email address and its domain (such as gmail.com). The code can’t be turned back into either address, and counts more than a day old are cleared out as new ones arrive.
Where it is kept
Data is stored with Supabase, which provides our database and account sign-in. Newsletter addresses are stored with Resend, which sends our email. This site is hosted on Vercel, which also counts its page views. An address you type to find where you vote goes to the US Census Bureau, and one you type to find your ballot to Google and the Census Bureau, and neither is kept. Google suggests addresses as you type one, and nothing typed is kept.
What we don’t do
No ads. No tracking cookies. We don’t sell your data.
Your rights
Wherever you live, you can see, copy, correct and delete what Boring keeps about you, and withdraw your consent. The buttons below work at once. Anything you write to us about, we answer within four weeks.
See it, and take a copy. Signed in, use Download my data under Privacy and data on your account page, or Settings → Download my data in the app: one file (JSON) with everything we keep about you, which other services can read too. Without an account, use the “Your data” link at the bottom of any Boring email, or ask for that link on the Your data page, and we’ll email you the file.
Correct it. Change your categories in the app’s Settings, and your About you answers on the About you page. For anything else, email us at the address below.
Delete it. Delete my account and everything about me, under Privacy and data on your account page or in the app’s Settings, deletes your account and everything we keep about your address. Without an account, use Delete everything about me from a “Your data” link sent in the last 7 days, since links can be forwarded; with an older one, the page emails you a new one. Either way it happens at once, and takes you off our email lists too. What stays is the record that your address had its free week, by a code, never the address (see Accounts). Our database backups keep a copy until they expire.
Your posts and comments on the community board. Delete any post or comment of your own from its page, whenever you like. Your posts, comments, votes, reports, flags and hidden authors are in your copy of your data, and go when you delete your account.
Withdraw your consent. Unsubscribe with the link at the bottom of any email. To stop us recording when you open our emails and click their links, use the Opens and clicks link at the bottom of any email. To delete your About you answers, save that page with the box unticked. To stop this site counting your visits, turn it off under counting visits. Withdrawing doesn’t undo what was done before, such as a poll total already published.
Complain. If you think we’ve mishandled your data, please tell us first, at the address below. You can also complain to a data protection authority: in the EU, the one where you live or work (the list); in the UK, the Information Commissioner’s Office.
Contact
To unsubscribe from an email edition, use the link at the bottom of any of them. To ask anything about your data, or to use any of your rights by email, write to boringnews.hello@gmail.com.