Privacy Policy
Effective: 2026-06-12 (beta) · Version: 2026-06-12
Beta notice. This is the interim privacy policy for the Right Click Save beta. A fuller version, currently under legal review, will replace it. Everything below describes what the product actually does today.
The data controller is Right Click Save, Inc., a Delaware corporation (169 Madison Ave, STE 87284, New York, NY 10016).
Contact: support@rightclicksave.com
EU representative (GDPR Art 27): Euverify Ltd (Ireland), Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork, T23 AT2P, Ireland — gdpr@euverify.com
UK representative: Euverify Ltd (UK), 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom — gdpr@euverify.com
GDPR requests: you can verify our representative and submit requests through their portal: https://gdpr.euverify.com/verify/f5bbaa53-292e-4df3-9881-907166b74a60
The short version
Everything on RCS is readable without an account. If you only read, we process almost nothing about you.
If you create an account, we store what you give us (email, a handle, an optional profile) and what you post.
We never sell or share your personal data for advertising. Not "currently don't" — don't, and won't without asking you first.
Analytics are split in two: an anonymous, cookieless visit counter that runs for everyone, and richer product analytics that run only if you opt in via the cookie banner.
Deleting your account erases your identity but keeps your posts, attributed to "[deleted]" — decide what you want removed before you delete.
What we collect
If you only visit: aggregate, cookieless visit statistics and page-speed telemetry (Vercel) that build no profile of you; and ordinary hosting logs (IP addresses and request metadata) used to serve and secure the site. If you subscribe to the newsletter, your email address goes to Beehiiv, our newsletter platform, which manages the subscription and unsubscribe. Optional product analytics (PostHog, EU-hosted) run only after you opt in via the cookie banner.
If you create an account: your email address (used for sign-in links, notifications you control, and account messages — never shown publicly); your username, display name, and optional profile (avatar, bio, links, location — public); your posts, comments, and votes (posts and comments are public; votes are not); invitation records; and notification preferences.
For security: the sign-in form uses Cloudflare Turnstile (cookieless) to keep bots out, alongside rate limits; access attempts on protected article previews are logged by IP to stop brute-force guessing; and our abuse monitoring stores hashed email addresses only, never raw ones. Content you submit is screened automatically for abusive material (we store screening scores and a hash, not a copy of the text); flagged items are reviewed by people, and no account-level action is taken solely by a machine.
What we deliberately do not collect: advertising identifiers, cross-site trackers, session recordings, precise location, or fingerprinting.
Who processes data for us
Supabase (database, authentication, storage — US), Vercel (hosting and aggregate analytics — US), Cloudflare (media storage and delivery, sign-in bot protection — US), PostHog (opt-in product analytics — EU, Frankfurt), Resend (transactional email — US), Beehiiv (newsletter — US), OpenAI (automated content-safety screening — US), Anthropic (AI tooling used by our staff for editorial curation and site development and analysis, under API terms that do not permit training on our data — US), and Slack (internal team notifications of new public posts — US). No third party may use your data for its own purposes.
International transfers: we are a US company and our core infrastructure is hosted in the United States, so personal data of EU/UK users is processed in the US. Safeguards are the EU–US Data Privacy Framework and UK Extension, with Standard Contractual Clauses as fallback, per provider.
How long we keep things
Account data: until you delete your account. Posts and comments persist after deletion, attributed to "[deleted]". Retained after deletion: moderation and audit records, invitation records, email delivery logs at our email provider (about 30 days), and a register of retired usernames so nobody can impersonate you by claiming your old handle. Opt-in analytics events are retained up to 7 years. Database backups age out after about 7 days and are used only to restore the service.
Your tools and rights
In account settings you can edit your profile, control notification emails, export your data (a JSON copy of your profile, posts, comments, and votes, emailed to you, once per 24 hours), and delete your account entirely.
Wherever you are, you can ask us for access, correction, erasure, restriction, portability, or to object to processing: support@rightclicksave.com. EU/UK users can also use the representative portal above, can withdraw analytics consent any time via "Manage preferences", and have the right to complain to their data-protection authority. We do not sell or share personal information as defined by the CCPA.
The magazine and the Index
RCS publishes journalism: articles and a structured Index of the people, artworks, organizations, and events of the art-and- technology world, compiled from our reporting and public sources. This is editorial processing, separate from account data. If you are written about and something is wrong, email support@rightclicksave.com — corrections are assessed editorially.
Cookies
Four first-party cookies (sign-in session, theme, display preference, and your cookie choices), plus opt-in analytics cookies that are set only if you accept them. Nothing non-essential is set before you choose, and you can change your mind any time via "Manage preferences" in the footer.
Age
Accounts are for people 16 or older. Reading requires no account and no age. If we learn an account holder is under 16, we will delete the account.
Changes
We may update this policy as the Service evolves. We version it, and the current version is always available at this page.
support@rightclicksave.com · Right Click Save, Inc., 169 Madison Ave, STE 87284, New York, NY 10016