Privacy policy

Our two roles

We send on behalf of organizations. An organization that uses renotifi keeps its own list, writes its own notices and decides who receives them. It is responsible for your details on its list. We handle them only to run its lists and deliver its notices, under our agreement with it.

To find out why you're on a list, or to change your details, contact the organization named in the email's From line. If you write to us instead, we'll pass your request on.

Some things are ours alone:

• this website;
• the unsubscribe and sign-up pages;
• the “Unsubscribe from all lists” form and the blocks it creates;
• the list of addresses we no longer send to;
• the records we keep to run the service safely.

This website

renotifi.app sets no cookies, runs no analytics scripts and loads nothing from other sites. If you choose a light or dark theme, your browser remembers it and never sends it to us.

Our web host keeps standard access logs (IP address, page, time and browser) for 30 days. Logs are distilled into statistical reports daily. The reports are kept up to 1 year.

If you're on an organization's list

What we hold:

• your email address;
• anything else the organization keeps for its notices: usually your name, sometimes details such as a membership number;
• when and how you were added: by the organization, by import, or by your own sign-up.

For how long: until the organization removes you or deletes the list.

Each notice sent to you leaves a delivery record. It holds:

• your address and the details used in that notice;
• whether it was delivered;
• which email provider carried it.

We delete these records 90 days after the notice finishes sending, keeping only totals.

Our delivery log records every message we handle (sender, recipients, subject, times and outcome) for 30 days, so delivery problems can be traced.

The message itself stays on our server only while it's being delivered. If a provider can't take it, we retry for up to 24 hours. A message still undelivered then is set aside until we retry or delete it.

No tracking by renotifi. We add no tracking pixels and don't rewrite links. An organization's logo is either attached to the email, or loaded from the organization's own website when your email app shows images, if they elected to show a graphic. The organization then may be able to generate statistics based on the requests for the graphic.

Each notice is addressed to you alone, so nobody else on the list sees your address.

Unsubscribing

Every notice ends with a personal Unsubscribe link. Many email apps also show a one-click Unsubscribe button that uses it.

• The link: we keep only a scrambled (hashed) copy of its code, with your address and the list or lists it covers. It works for 90 days after the notice was sent; then we delete it.
• Your opt-out: we record your address, the list, the date and how you unsubscribed.
  • We keep it for as long as the list exists. That's what keeps you off the list, even if the organization imports it again.
  • It's lifted only if you sign up to that list again yourself and confirm, or if the organization records that you've asked to rejoin.

Opening an unsubscribe page changes nothing. Only the button does.

Unsubscribing from all lists

You can ask to leave every renotifi list your address is on, either from an unsubscribe page or at unsub.renotifi.app. We always check by email first: nothing changes until you use the link we send.

Your request holds:

• your address and the time;
• your IP address;
• where you made the request;
• whether you ticked Also keep it off lists it is added to later.

We delete every request 30 days after it was made, and remove the IP address sooner if the request can no longer be confirmed. Requests turned away for coming too often keep only the address, time and IP address, and are deleted after 7 days.

The email goes only to the address in the request. Its link works for 48 hours.

When you confirm, you're opted out of every list your address is on, as above. If you ticked the box, we also keep a block: your address, the date and how it was made. The block keeps you off lists you're added to later, and stays until you ask us to remove it.

Signing up on an organization's page

What you enter: your email address, plus your name or other details if the page asks. We also note the time and your IP address.

Abuse checks:

• The page may use Cloudflare Turnstile, which runs in your browser to tell people from bots. To verify the result, we send it to Cloudflare with your IP address.
• We check that your address's domain can receive email, by looking up only the part after the @.

Until you confirm, your details wait with the request. The confirmation link works for 48 hours after we send it.

• If it isn't used, we erase what you entered and your IP address, and delete the request 30 days after it was made.
• Requests turned away (too many, or already signed up) keep only the address, time and IP address, and are deleted after 7 days.

When you confirm, you're added to the list with the details you entered. We keep the sign-up record as proof that you agreed, for as long as you're on the list. It holds your address, and the time and IP address of both the sign-up and the confirmation.

For confirmed sign-ups, we use ipinfo.io for network (such as your internet provider) and country info for IP addresses. This lets the organization see where its sign-ups come from and spot fake ones. We refresh the answer weekly, and delete it once no sign-up record holds that IP address.

A sign-up page may link to the organization's own privacy policy.

Bounces and spam reports

We stop sending to an address if email to it keeps failing permanently, or if a provider tells us its owner reported a message as spam.

• The address goes on our do-not-send list, with the date and the reason.
• This covers every message sent through renotifi, for every organization.
• It lasts until we remove the address.

Undeliverable messages come back to mailboxes we run. There they're read automatically and deleted, and so are automatic replies. Anything else that arrives there is set aside for a person to read, and we note its sender and subject.

Replies to a notice go to the organization, not to us.

Keeping the service safe

• No cookies: the unsubscribe and sign-up pages set none.
• Rate limits: to stop the pages being misused, we hold IP addresses in memory, never on disk, to limit how often one connection can use them. Page visits are only counted as totals.
• Server logs record the IP address with each sign-up, all-lists request and confirmation, and the sender of each message we handle.
• Backups: we back up our data every night and keep the last 7. Something deleted can stay in a backup until it's purged.

Who else handles your data

Our data and service providers:

• Cloudflare
• ipinfo.io
• Mail delivery is managed by a dynamic list of mail service providers, to ensure prompt and reliable delivery.

The organization that keeps a list sees:

• your details on it;
• your opt-outs;
• your sign-up records, including their IP addresses and the network and country found for them.

We don't sell personal data, use it for advertising, or profile you. We share it with no one else unless the law requires it.

Where your data goes

The website is hosted in the USA. Cloudflare caches information worldwide. Mail service providers are located worldwide, with the exception of countries embargoed by the USA or EU.

Why we're allowed to

• Delivering notices and running lists: on each organization's instructions, under its own legal basis.
• Opt-outs, blocks and the do-not-send list: our legitimate interest, and the organizations' legal duty, in not emailing people who've said no.
• Sign-up records: to show that you agreed to join.
• Security records and abuse checks: our legitimate interest in keeping renotifi safe for everyone.

Your rights

You can ask for a copy of what we hold about you. You can also ask us to correct it, delete it, or stop or limit using it. Write to privacy@renotifi.app and we'll answer within a month. For your details on an organization's list, ask the organization; we'll help it answer.

Deleting your opt-out or block would let email reach you again. So unless you tell us you want email again, we'll keep just your address and the date you said no.

You can also complain to the data protection authority where you live. In the UK, that's the Information Commissioner's Office (ico.org.uk).

Changes

When what we do changes, we'll update this page and the date at the top.