Privacy Policy

Data controller / provider: Newsongbird (sole proprietor) · Website: https://www.newsongbird.com · Last updated: September 3, 2026

This Privacy Policy explains how Newsongbird handles personal data on the Newsongbird website, Newsongbird Pro, and Code Template Pack. Please do not submit sensitive personal data, payment-card numbers, government identifiers, passwords for other services, or confidential third-party information.

THE OUTLAW itch build: the downloadable single-player build requires no account and does not send gameplay, hands, or scores to us. It may store local difficulty/audio settings and a daily local AI-taunt quota in your browser. The optional website portal uses account data and AI logs only as described below. The build is designed for a conservative teen-like audience: children under 13 should not use it, and users under the digital-consent age selected by their local law should have a parent or guardian contact Support with a privacy request.

1. Data we collect

Data	Examples	Why we collect it
Email address	Address used for Newsongbird Pro, Code Template Pack, wish-pool notifications, API registration, reports, or support	To create or restore access, deliver the product or report, send service messages, and answer support requests
Account authentication data	Hashed password, email-verification and password-reset code hash, session metadata, login timestamps, and lockout counters	To operate email-and-password accounts, verify email ownership, protect accounts, and prevent brute-force attacks
IP and technical data	IP address, timestamp, requested URL, referrer, browser/device type, language, and security signals	To serve pages, prevent abuse and fraud, diagnose errors, and protect the service
Usage data	Page path, event type, random session identifier, referrer, and limited event metadata	To understand feature usage, improve the product, and measure performance
Order and account data	Email, order or subscription ID, plan, status, and delivery state needed to enable access	To activate purchases, manage cancellation, support refunds, and prevent payment abuse
Content you submit	Wish-pool text, AI-chat prompts, watchlist targets, feedback, and support messages	To provide the feature you requested and maintain service quality and security
Payment data handled by Paddle	Name, email, billing address, payment method, fraud-prevention data, tax information, and transaction history	Paddle processes checkout, taxes, receipts, refunds, and payment compliance; Newsongbird does not receive or store full card details

2. How we use data

Provide the product: grant access, deliver downloads or reports, operate watchlists, and process notifications.
Process payments and orders: verify status, enable or disable access, handle refunds, and prevent fraud.
Provide support: respond to questions, failures, cancellation requests, and refund requests.
Operate and secure the website: monitor logs, prevent abuse, block attacks, and repair errors.
Improve the product: analyze aggregate or pseudonymous usage patterns and feature performance.
Meet legal obligations: keep records required for tax, accounting, payment processing, claims, or law.

We do not use your email address for unrelated marketing merely because you purchased a product or submitted a wish. Service messages about your order, access, security, or requested feature may still be sent.

3. Payment processing by Paddle

Checkout and payment processing are provided by Paddle as Merchant of Record. When you pay, Paddle may collect and process your name, email, billing address, payment method, device and fraud-prevention data, tax details, and transaction history. Paddle’s use of that information is governed by the Paddle Privacy Notice.

Newsongbird receives only limited order metadata needed to deliver the product, such as your email, order or subscription identifier, plan, status, and relevant payment event information. We do not receive or store your complete payment-card number.

4. Cookies and local storage

The site uses a first-party, lightweight analytics system without advertising cookies. It may store a random session identifier or feature token in your browser’s localStorage. You can remove it by clearing site data in your browser.

When you sign in, the site also sets a first-party ns_session cookie. It is HttpOnly, Secure, and SameSite=Lax; the cookie contains a high-random session identifier rather than your password. Signing out revokes the server-side session.

Paddle Checkout may use its own cookies and device signals for payment security and fraud prevention. If an advertising or optional analytics service is enabled in the future, it will be disclosed here and used only on a lawful basis.

5. Sharing with third parties

We do not sell your personal data. We also do not share it with unrelated third parties for their own marketing or advertising.

Personal data is shared only with processors necessary to operate the requested service or where required by law:

Paddle: checkout, taxes, receipts, refunds, chargebacks, and payment fraud prevention.
Hosting, DNS, email, storage, monitoring, and security providers: operating and protecting the website.
AI-model provider: only when you choose an AI chat feature, for the prompt and conversation context needed to generate the response.
Professional advisers, payment providers, or authorities: only where necessary for legal compliance, fraud prevention, claims, or a valid legal request.

Apart from these necessary processors and legal requirements, Newsongbird does not share your personal data with third parties.

6. International transfers

The website and its providers may process data in the People’s Republic of China, the EEA, the United Kingdom, the United States, or other countries. Where required, we use safeguards such as provider contractual clauses, data minimization, encryption, or another lawful transfer mechanism.

7. Retention

Technical and security logs are retained as long as needed for operation, security, dispute handling, and legal record-keeping.
Password hashes and account records are retained while the account exists; verification and reset codes expire within minutes. A queued email containing a code is removed after expiry, while hashed code records may be retained briefly for security auditing.
Analytics records are retained while useful for product analysis, then deleted or aggregated when no longer needed.
Email, order, subscription, download, watchlist, and support records are retained while the relevant feature or order relationship exists and for a reasonable period afterward.
Payment and tax records are retained as required by applicable law.

8. Security

We use HTTPS, access controls, webhook-signature verification, API-key controls, logging, and operational review to protect data. No online service can guarantee perfect security. Please report suspected incidents to contact@newsongbird.com.

9. Your privacy rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent where processing is based on consent; opt out of certain advertising or profiling where applicable; and complain to your local data-protection authority.

Signed-in users can download a machine-readable copy of account-visible data and request permanent deletion from the account page. We may request minimum information needed to verify your identity and prevent unauthorized access or deletion. You may also email contact@newsongbird.com to exercise these rights.

10. Children

The website is not directed to children under 16. If we learn that personal data was collected from a child without required consent, we will delete it where legally permitted.

11. Changes

We may update this policy to reflect changes in the product, providers, or law. The updated date will always appear on this page.

12. Contact

Provider: Newsongbird (sole proprietor)
Email: contact@newsongbird.com
Website: https://www.newsongbird.com