1. Who is responsible
Prototypr Limited (company number 123132, Unit G02, Eurocity, Europort Avenue, Gibraltar GX11 1AA) is the data controller for FeedBagel. For anything about your data, email [email protected].
2. What we collect
If you only read the site, you do not need an account. Our servers keep standard request logs (IP address, browser user agent, the page requested and the time) for security and to keep the service running.
If you create an account, we collect:
- your name, email address and profile picture from the Google or GitHub account you sign in with;
- the username, profile details and onboarding answers you give us, including any API access application;
- what you do in FeedBagel: saved and favourited articles, folders, feeds and topics you follow, votes, and links, comments and forum posts you submit;
- if you use the API, webhooks or MCP: your API keys, the webhook URLs you register, the feeds and topics they track, and delivery and usage records;
- if you use the mobile app and allow notifications: a push notification token for your device and your time zone, so the daily digest arrives in the morning.
If you subscribe to Pro, Stripe collects your payment details and billing address. We receive and store your Stripe customer and subscription IDs, your plan, and billing status. We never see or store your full card number.
3. How we use it, and our legal basis
- To provide FeedBagel (contract): signing you in, keeping your saves and folders, delivering webhooks and notifications, and enforcing plan limits.
- To take payment (contract): billing your subscription and usage through Stripe.
- To keep FeedBagel safe (legitimate interests): preventing abuse and spam, rate limiting, reviewing submitted links, and fixing faults.
- To meet legal duties (legal obligation): keeping financial records and responding to lawful requests.
- To send service messages (contract or legitimate interests): account, billing and important change notices. Notifications such as the daily digest can be turned off at any time.
We do not sell your personal data, show you third-party ads, or build an advertising profile of you.
4. Cookies
We use only the cookies needed to keep you signed in and to make the site work. We do not use analytics, advertising or cross-site tracking cookies. The site may also save small preferences in your browser, such as which language filter you chose.
5. Who we share it with
We use these service providers to run FeedBagel. They process data on our behalf and only for that purpose:
- Hetzner and Netcup (Germany): servers and database hosting.
- Google and GitHub: sign-in.
- Stripe: payments and billing.
- Expo: delivering push notifications to the mobile app.
- Amazon Web Services: storing images.
- AI model providers (such as OpenRouter and OpenAI): processing article text to produce summaries, tags and ratings. Your account details are not sent to them; links you submit are processed like any other article.
Things you choose to make public, like your profile, shared links, comments and forum posts, are visible to everyone. Webhook deliveries go to the URLs you register. We may disclose data if the law requires it, or to protect our rights or other people's safety. If FeedBagel is ever sold or merged, your data would move to the new owner under this policy.
6. International transfers
Some providers, such as Stripe, Google, GitHub and AI providers, process data in the United States or other countries. Where that happens we rely on appropriate safeguards, such as the European Commission's standard contractual clauses or an adequacy decision.
7. How long we keep it
- Account data: while your account is open. When you delete your account we delete or anonymise it within 30 days, except as below.
- Billing records: as long as tax and accounting law requires, usually up to 6 years.
- Server logs: kept for a short period for security and troubleshooting, then deleted.
- Public posts may stay visible in anonymised form after you leave, unless you ask us to remove them.
8. Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Email [email protected] and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Gibraltar Regulatory Authority, or to the data protection authority where you live, such as the UK ICO.
9. Security
We use encrypted connections (HTTPS), keep secrets out of our code, and limit who can access production systems. No system is perfectly secure, so if you think your account has been compromised, tell us straight away.
10. Children
FeedBagel accounts are not for anyone under 16, and we do not knowingly collect their data. If you think a child has given us data, email us and we will delete it.
11. Changes
We will update this policy when what we do changes, and change the date at the top. If a change materially affects you, we will tell you before it takes effect. See also our Terms of Service.