Privacy notice · updated 29 September 2026
Privacy
One Reader is designed to support private correspondence while collecting only the information needed to operate the service, keep it safe and manage memberships.
Who is responsible
The data controller is Fabrizio De Vincenzi, resident in Negrar di Valpolicella (Verona), Italy, operating the One Reader service. Privacy questions and requests can be sent to customers@onereader.co.
Information we process
Account and eligibility
Email address, account identifier and status, verification and sign-in activity, month and year of birth, age-pool eligibility dates, country, currency, languages and availability to receive letters. We do not ask for the day of birth.
Correspondence
The letter text, its detected language, sender and recipient account identifiers, private reply aliases, delivery state, dates, message identifiers and the number of removed attachments. Letter text is encrypted in our database. Resend necessarily processes the readable message to receive and deliver it.
Safety and requests
Blocks, reported letters, the reporting member, selected report category, privacy requests and their status. A reported encrypted letter may be made available to an authorised operator for review.
Membership and payments
Plan and subscription status, renewal dates, amount, currency and Stripe customer and subscription identifiers. Stripe receives the payment details and any billing address; One Reader does not store complete card details.
Communications and consent
Service-email recipients and delivery results, consent purpose, choice, wording, policy version, source and time. Optional Journal messages and product news are recorded separately from service registration.
Pre-registration contacts
If an unregistered address requests a sign-in link or writes to the public writing address, we keep the normalized email address and its source as a registration lead. We do not infer marketing consent, create an account or keep the attempted letter.
Minimal product events
For verified accounts we record a limited set of events such as completed registration, email verification and subscription activation or cancellation. These events contain the account identifier, time and minimal service context. We do not add page views, browsing paths, device profiles or letter content to product analytics.
How email correspondence is handled
One Reader uses Resend to receive and send letters, replies, account verification messages and other service emails. Resend therefore processes the sender and recipient addresses, message headers, delivery information and readable message content while receiving or delivering an email. One Reader receives delivery and bounce events, but does not record whether a message was opened or whether a link was clicked.
Incoming HTML is converted to plain text. Executable and remote content, quoted message history and signatures are removed where detected, and attachments are not forwarded. The resulting letter is delivered through a private reply address, so the two correspondents are not shown each other’s real email address.
One Reader does not add open-tracking pixels and does not rewrite links for click tracking. Letters and service messages are sent with both a minimal HTML version and a plain-text version.
Letter content stored in the One Reader database is protected with envelope encryption: each letter is encrypted with a separate AES-256-GCM data key, and that key is wrapped with a separate AES-KW key. This is encryption at rest, not end-to-end encryption. Resend and One Reader’s authorised server-side processing necessarily handle readable content while receiving and delivering the message.
Why we process it
Contract and requested steps. We use account, eligibility, correspondence and membership data to create and secure the account, match members, deliver letters and provide paid features.
Consent. We send optional Journal messages and product news only when you select the separate checkbox. You can withdraw this choice from your account at any time.
Legitimate interests. We prevent abuse, protect members, diagnose delivery failures, retain a minimal pre-registration contact after an attempted sign-in or letter, and use limited product events to understand whether the service works. We minimise these records and do not use them for advertising or cross-site profiling.
Legal obligations and claims. We keep and use records where required for tax, accounting, consumer-protection or legal-claims purposes and to respond to privacy requests.
Cookies and browser storage
One Reader does not use advertising cookies or analytics cookies and does not load a general visitor-analytics script. The service uses local browser storage only for necessary functions: keeping a signed-in Supabase session, completing registration across the email-verification step, limiting repeated sign-in requests and remembering the selected billing period. This storage is not used to follow visitors across websites.
Cloudflare Turnstile is loaded when a person starts registration or sign-in. It processes browser and request signals needed to distinguish people from automated abuse. A Cloudflare clearance cookie may be issued only if pre-clearance or a related Cloudflare security challenge is enabled. Necessary security storage does not require an advertising or analytics choice.
Service providers and international transfers
- Supabase provides authentication, database and server-side functions.
- Resend receives and delivers letters and service emails, and processes message content, addresses, headers and delivery information.
- Stripe processes payments, subscriptions, billing details and refunds.
- Cloudflare provides network security and the Turnstile anti-abuse check.
These providers act under their respective data-processing terms. Some processing may take place outside the European Economic Area, including in the United States. Where required, transfers are covered by an adequacy decision, standard contractual clauses or another lawful transfer mechanism.
How long information is kept
- Account, preference, correspondence and consent records are kept while the account is active and for as long as needed to provide and protect the service.
- A pre-registration contact contains only the email address and source. It is removed automatically when an account is created, or earlier on request.
- Private reply aliases expire 30 days after the last exchange.
- Resend ordinarily retains email and log data for 30 days under its standard service retention.
- When account deletion is requested, service access and incoming deliveries stop immediately, and any active subscription is cancelled. The account and its identifiable Supabase records are permanently removed no later than 30 days after the request.
- After deletion, product events remain only without an account identifier for aggregate statistics. A receipt containing the request identifier and completion dates is retained for a further 90 days to verify that deletion occurred.
- Stripe and any records needed for tax, accounting, consumer protection, fraud prevention or legal claims may be retained for the period required by law. Backups may persist temporarily until their normal secure rotation completes.
Your choices and rights
You may ask for access to your personal data, correction, deletion, restriction, portability where applicable, or object to processing based on legitimate interests. You may withdraw Journal consent at any time without affecting earlier lawful processing. These controls are available in the private account area or by emailing customers@onereader.co.
You may also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali, or with the authority where you live or work.
Children and correspondence safety
One Reader is available from age 14. Members aged 14–17 and adults are kept in separate matching pools. Letters should not include contact details, sensitive information or information that identifies the writer or another person. Recipients can stop a correspondence or report a letter using the private links in the message.
Security
One Reader uses one-time sign-in links, access controls, private reply aliases and envelope encryption for letter content stored in its database. Email remains readable in the sender’s and recipient’s inboxes and may also be processed according to the policies of their respective email providers.