Privacy notice · implementation draft
Privacy
One Reader is designed to collect as little as possible. This implementation draft makes the consent choices visible now; the controller identity, providers, contact details and final retention periods will be completed before the public waitlist opens.
What we collect
Your email address, month and year of birth, languages, account and subscription status, and the communication preferences you selected. We do not ask for your day of birth, and the Journal preference is stored separately from service registration.
Why we use it
To operate the account, match members who can correspond in the same language, and keep the 14–17 and adult matching pools separate. Journal notes and product news are sent only when you choose the separate optional checkbox.
Legal bases
The final notice will document the applicable basis for the requested waitlist service and the separate consent basis for optional Journal communications. These purposes are never bundled into one required acceptance.
Your controls
You can leave the waitlist, withdraw optional Journal consent, request access, correct inaccurate information or ask for deletion. Birth details are locked in the account to protect the matching pools, but you can request a correction if they are inaccurate.
When a letter is reported
The correspondence is closed and the reported letter, already stored in encrypted form, can be made available to One Reader for a separate human review. We record the reporting member, the letter and the selected category; the form does not ask for additional free-text details.
Operational principles
- Mailbox ownership may be confirmed with a double opt-in link.
- No tracking pixels or open tracking in correspondence emails.
- Consent records are purpose-specific, versioned and timestamped.
- Data is deleted when its purpose and retention period end.