Privacy Policy
npm Digest — a service by Elborai Software
Last updated: 2025-12-13
Who we are
npm Digest is operated by:
Samuel El-Borai
Elborai Software
Gluckstraße 57
22081 Hamburg
Germany
Email: support@npmdigest.com
What npm Digest does
npm Digest consolidates npm package publish notification emails into digests. You forward npm notifications to us, we aggregate them, and send you a summary at your chosen frequency.
Data we collect
Account data
| Data | Why | Legal basis |
|---|---|---|
| Email address | Account, login (via magic link), delivering digests | Contract (Art. 6(1)(b) GDPR) |
Email content
| Data | Why | Legal basis |
|---|---|---|
| Forwarded npm emails | Parsing, generating digests | Contract |
We don't store email content ourselves. Our email provider (Resend) retains inbound emails for up to 7 days, then deletes them automatically.
Payment data
Handled by Stripe (Ireland). We don't see or store your card details. Stripe collects what's needed for payments and tax compliance.
Technical data
| Data | Why | Legal basis |
|---|---|---|
| IP address, browser, timestamps | Security, debugging | Legitimate interest (Art. 6(1)(f) GDPR) |
Logs are deleted after 30 days.
Analytics
We use Simple Analytics (Netherlands). It doesn't use cookies, doesn't track individuals, and doesn't collect personal data. Just aggregate page view counts.
Who we share data with
| Provider | What for | Where | Transfer basis |
|---|---|---|---|
| Deno Land Inc. | Hosting | USA | Transfer Impact Assessment |
| Prisma Data | Database | Frankfurt, Germany | — |
| Simple Analytics | Analytics | Netherlands | — |
| Resend Inc. | Sending emails | USA | EU-US Data Privacy Framework |
| Trigger.dev | Background jobs | UK | UK Adequacy + Addendum |
| Stripe | Payments | Ireland | — |
We don't sell data or use it for advertising.
How long we keep data
| Data | Retention |
|---|---|
| Account & service data (digests, package info) | Until you delete it + 30 days |
| Email content | Up to 7 days (Resend, then auto-deleted) |
| Payment records | 10 years (German tax law) |
| Logs | 30 days |
Your rights
Under GDPR, you can:
- •Access your data
- •Correct inaccurate data
- •Delete your account and data
- •Export your data (portability)
- •Object to processing based on legitimate interest
- •Restrict processing in certain cases
Delete your account or export your data anytime at /app/settings. For other requests, email support@npmdigest.com — we'll respond within 30 days.
You can also complain to the Hamburg data protection authority:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22
20459 Hamburg
https://datenschutz-hamburg.de
Cookies
We only use essential cookies for login sessions. No tracking cookies, no consent banner needed.
Stripe may set cookies on payment pages for fraud prevention.
Changes
If we make significant changes, we'll email you. Minor updates just get a new date on this page.
Questions
Email: support@npmdigest.com