Privacy Policy

Passages ("we", "us", "our") is operated by Thiago Bueno. This privacy policy explains how we collect, use, and protect your information when you use passages.ink and the Passages browser extension (together, the "Service").

We believe in straightforward language. No legalese, no tricks — just clarity about what we do with your data.

What we collect

Account information. When you create an account, we collect your name and email address. We use this to authenticate you, to send transactional emails (like password resets), and to send the occasional email about your own reading (see Emails about your reading).

Saved content. When you save an article through our browser extension or the web app, we store the article's content, URL, title, and metadata. This is the core of what Passages does — preserving articles for your reading.

Browser extension data. The Passages browser extension extracts article content from web pages you choose to save. It only activates when you explicitly save an article. It does not track your browsing history, monitor your activity, or collect data from pages you don't save.

Publications. When you create publications (ebooks), we store the publication metadata and the generated files so you can download them.

Usage data. We use Umami, a privacy-focused analytics tool, to collect anonymous, aggregated usage statistics. On our public pages (like the landing page) Umami records page views; it is not loaded on pages you see once signed in. When you use the app, our server sends Umami anonymous event records — for example "an article was saved from nytimes.com" or "an ebook was generated" — that contain no name, email address or account identifier. Umami does not use cookies, does not collect personal information, and does not track you across sites.

Account activity. In our own database, linked to your account, we record which days you use Passages and when you first reach a few key steps (such as saving your first article or creating your first ebook). We use this only to understand whether Passages is useful to the people who sign up and where they get stuck. It is never shared or sold.

What we don't collect

• We don't show ads.
• We don't sell your data to anyone.
• We don't use tracking cookies or third-party trackers.
• We don't build advertising profiles.
• We don't collect data from pages you haven't explicitly saved.

How we use your information

We use your data to:

• Provide and maintain the Service (saving articles, generating ebooks, managing your account).
• Send transactional emails related to your account.
• Send occasional emails about your own reading, described below.
• Improve the Service based on aggregated, anonymous usage patterns and on the account activity described above.
• Occasionally ask you, by email, about your experience with the Service. Replying "no more" (or anything similar) stops these emails.

We do not use your data for marketing, advertising, or profiling. The emails about your reading are about your own library and the books our editors bind; we never send promotions, and we never share your address.

Emails about your reading

Account emails (sign-in links, password changes, deliveries to your e-reader) always arrive. Besides those, we may send you a few emails about your own reading:

• A book is waiting, when you've saved enough articles for a book and haven't bound your first one yet.
• Get it onto your e-reader, when you've set up your Kindle or Kobo but haven't sent a book to it.
• From our editors, when our editors share a new featured book.
• Your month in reading, early each month, a look back at what you saved and bound the month before.
• A note when you've been away, when you haven't visited Passages for a month, once until you come back.
• What's new in Passages, when we add something new to Passages.

How they work:

• At most one a week, across all of them.
• Nothing promotional: they're about your library, never about offers or other products.
• No open or click tracking: no tracking pixels and no rewritten links. A link in one of these emails names the kind of email it came from, so our server can count, without knowing who you are, how many visits each kind brings.
• You can turn each kind off in the Emails section of your profile, or with the unsubscribe link at the bottom of every such email, without signing in.
• We keep a record of which of these emails we sent you and when, so we can keep to one a week and learn whether they help. It is deleted with your account.

Third-party services

We rely on a small number of trusted services to operate Passages:

These services process data only as necessary to provide their function. We do not share your personal data with any other third parties.

Cookies

Passages uses only first-party cookies needed for the app to work: a session cookie for authentication, and small helper cookies such as one that remembers the last day your activity was recorded (so we don't record it on every page). We do not use advertising cookies, tracking cookies, or any third-party cookies.

Data storage and security

Your data is stored on servers located in the United States. We use HTTPS encryption for all data in transit and follow industry-standard security practices to protect your data at rest.

Data retention and deletion

We retain your data for as long as your account is active. When you delete your account, all your personal data — including saved articles, publications, and account information — is permanently deleted. We are committed to providing an instant deletion mechanism.

Your rights

For users in Brazil (LGPD)

Under the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados), you have the right to:

• Confirm whether we process your personal data.
• Access your personal data.
• Correct incomplete, inaccurate, or outdated data.
• Request anonymization, blocking, or deletion of unnecessary or excessive data.
• Request data portability.
• Request deletion of data processed with your consent.
• Obtain information about third parties with whom your data is shared.
• Revoke your consent at any time.

For users in the European Economic Area (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access your personal data.
• Rectify inaccurate personal data.
• Request erasure of your personal data.
• Restrict or object to processing of your personal data.
• Data portability.
• Withdraw consent at any time.

Our legal basis for processing your data is the performance of our contract with you (providing the Service) and your consent where applicable. For the emails about your reading, it is our legitimate interest in helping you read what you save; you can object at any time by turning them off.

Exercising your rights

To exercise any of these rights, contact us at privacy@passages.ink. We will respond within 15 days for LGPD requests and within 30 days for GDPR requests, as required by law.

International data transfers

Your data is processed and stored in the United States. By using the Service, you acknowledge that your data will be transferred to and processed in the United States, where data protection laws may differ from those in your country. We take reasonable steps to ensure your data is treated securely and in accordance with this policy.

Changes to this policy

We may update this privacy policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we will also let you know directly, for example by email or in the app.

Contact

If you have questions about this privacy policy or your data, reach out to us at privacy@passages.ink.

Passages is built by Thiago Bueno.