This policy explains what personal data MultivRSS collects, why, and what rights you have over it. It applies to multivrss.com and the MultivRSS dashboard, browser extension, and share-target integration.
If anything here is unclear, write to [email protected].
Account data. Email address, a username (generated from your email, or chosen at registration), and a bcrypt password hash. If you sign in with Google or GitHub, we receive the name, email, and avatar your OAuth provider shares with us. We never see your Google or GitHub password.
Your content. The feed sources you subscribe to, the categories and tags you create, and the links you save to your reading list. This is the data the product exists to store; it's yours.
Technical & security data. IP address and request metadata, used only for rate-limiting login and password-reset attempts and for blocking malicious feed URLs (server-side request forgery protection). We do not log this for analytics.
Error reports. If the app crashes, we send a diagnostic report (stack trace, the URL you were on, browser/OS info, and IP address) to our error-tracking provider, Sentry, hosted in the EU. This helps us fix bugs before they affect more people.
We do not run advertising or analytics trackers, and we do not sell or rent your data to anyone.
We use a small number of processors to run the service, each bound by their own data-processing terms:
| Provider | Purpose | Data involved |
|---|---|---|
| Sentry | Error tracking | Crash reports, IP address |
| Resend | Transactional email | Email address, for password resets |
| Google / GitHub | Optional OAuth sign-in | Name, email, avatar (only if you use it) |
Feed sources, saved links, categories, tags, and search are handled entirely on our own infrastructure. Nothing is shared with a third party to provide those features. Some of the above processors are located outside the EU/EEA; where that's the case, they operate under standard contractual clauses or an equivalent safeguard.
Account data and content are kept for as long as your account is active. If you ask us to delete your account (write to [email protected]), we'll delete your account data and content within 30 days, except where we're required to keep something longer by law. Error reports are retained by Sentry for a limited period under their own retention policy, typically 90 days.
Under GDPR, you can ask us to:
To exercise any of these, email [email protected]. If you're not satisfied with our response, you can lodge a complaint with your local data protection authority: in Italy, the Garante per la protezione dei dati personali.
MultivRSS uses a small number of strictly necessary cookies to keep you signed in and remember your preferences. See the Cookie Policy for the full list. We don't use tracking or advertising cookies.
MultivRSS is not directed at children under 16, and we don't knowingly collect data from them.
We'll update the date at the top of this page when this policy changes. Material changes will be communicated by email or an in-app notice.