Privacy & Security Policy

Effective date: 2025-12-23

This Policy explains how Pondr collects, uses, and protects personal data, in accordance with the GDPR and other applicable data protection laws.

1. Core Privacy Principles

Pondr is designed with privacy by default. We:

  • Collect only data strictly necessary to provide the Service.
  • Do not track behavior or usage patterns.
  • Do not sell or monetize personal data.
  • Do not reuse article content beyond fulfilling your order.

2. Data Controller

Pondr

Jiri Zlatohlavek

Umelecka 1005/5, Prague 7, 17000, Czechia, EU

[email protected]

3. Personal Data We Process

3.1 Identity and Account Data

  • Email address
  • Full name

3.2 Shipping and Contact Data

  • Shipping address
  • Phone number (required by the printer in some regions)

Shipping and contact data are encrypted at rest using application-level encryption.

3.3 Payment Data

Payments are processed by Stripe. Pondr does not store full payment card details. We receive only limited payment metadata (e.g., transaction status, last four digits).

3.4 Article and Service Data

  • URLs and metadata of articles selected for printing
  • Generated PDF files required for print fulfillment

Pondr does not read, review, or curate article content. Printed magazines are generated automatically and shipped directly from the printer to you. Pondr does not receive or physically access printed copies.

3.5 Third-Party Integrations

If you connect third-party services (e.g., Instapaper), encrypted OAuth tokens may be stored solely to fetch content you authorize.

4. Cookies and Local Storage (Functional Only)

Pondr does not use analytics or advertising cookies. We use strictly necessary technologies for:

  • Authentication (Clerk)
  • Payment security and fraud prevention (Stripe)
  • Core application functionality

No behavioral tracking or cross-site profiling occurs.

5. External Resources

The application loads fonts from Google Fonts. This may expose your IP address to Google as part of a standard web request. Pondr does not use this for tracking or profiling.

6. Data Sharing and Processors

Personal data is shared only as required to operate the Service:

  • Clerk – authentication
  • Stripe – payment processing (acts as an independent controller for payment data)
  • Lulu – printing and shipping
  • Resend – transactional email delivery
  • Cloudflare R2 – temporary PDF storage

Each processor receives only the minimum data necessary to perform its function.

7. No Archival and No Content Reuse

Pondr does not archive printed magazines or article content. Article data and PDFs are processed solely to generate your individual magazine and fulfill delivery.

Pondr does not:

  • Keep copies of printed magazines
  • Reuse article content for other users
  • Provide printed content to any party other than the printer for fulfillment

8. Data Retention

Personal data is retained only as long as necessary to:

  • Provide the Service
  • Fulfill legal and accounting obligations
  • Resolve disputes

Upon account deletion, personal data and connected third-party tokens are deleted or anonymized where legally permissible.

9. Security Measures

Pondr uses:

  • Encryption at rest for sensitive data
  • TLS/HTTPS for data in transit
  • Access controls and least-privilege principles
  • Reputable infrastructure and service providers

No system is fully secure, but reasonable technical and organizational safeguards are in place.

10. Your Rights

You have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Request data portability
  • Object to processing where applicable

Requests can be made via the contact email above. You also have the right to lodge a complaint with your local data protection authority.

11. International Transfers

Your data may be processed in countries outside your residence due to the location of service providers.

12. Changes

This Policy may be updated to reflect legal or operational changes. Material updates will be communicated via the Service or email.

Contact

For privacy-related questions or requests, contact: [email protected]