Privacy Policy
We don't know who you are.
We work hard to keep it that way.
Byte uses no cookies, no advertising networks, no third-party trackers, and no sign-up. This policy explains the limited data we do collect and exactly why. Last updated: April 2026.
Who we are
Byte EU is an independent news reader for EU affairs, built and operated by a solo founder. We are based in Germany and subject to German and EU data protection law (GDPR and TTDSG).
For privacy questions or data requests: privacy@bytenews.eu
What we collect and why
When you open Byte, we generate a random ID for your browser — something like a3f7bc29-.... We use this to remember your reading streak and, if you share a story, to credit you for the referral. This ID is stored on your device. We cannot link it to your name, email, or any other identifying information. We genuinely don't know who you are.
| What | Why | How long | Legal basis |
|---|---|---|---|
| Random browser ID (byte_uid) | Powers your reading streak and referral credits | Until you clear your browser storage or delete your data | Legitimate Interest |
| Feed visits and topic filters | So your streak counter works and the feed loads correctly | 90 days, then automatically deleted | Legitimate Interest |
| Referral source (first 8 chars of sharer's ID) | To credit the person who shared Byte with you | 90 days, then automatically deleted | Legitimate Interest |
| Reading behaviour (dwell time, clicks) | To improve story ranking — which topics you find most interesting | 90 days, then automatically deleted | Consent (you choose in the bar below) |
| Page views and performance metrics | Aggregated site analytics via Vercel — no individual tracking | Per Vercel's policy (~30 days) | Not personal data — IP stripped at source |
Byte uses localStorage, not cookies. This is a deliberate choice — no cookie banner needed because there are no cookies.
Our legal basis
For most of the data above, we rely on Legitimate Interest (GDPR Article 6(1)(f)). This means we've judged that the data is necessary for Byte to work — you can't have a reading streak without tracking that you read — and that it's not invasive enough to require your permission. You can delete it at any time.
For reading behaviour tracking (dwell time and clicks), we require your explicit consent. The bar at the bottom of the app asks for this. If you say no, Byte still works fully — you just won't get a personalised feed ranking. You can change your mind in Settings.
What we don't do
- We do not sell your data. Not now, not ever.
- We do not run advertising networks or real-time bidding.
- We do not share your data with third parties for their own purposes.
- We do not use your data to build profiles for advertising.
- We do not have access to your real name or email (unless you email us).
- We do not fingerprint your device.
Who sees your data (our processors)
Your data touches three infrastructure providers. Each has signed a Data Processing Agreement (DPA) with us and is GDPR-compliant. None of them use your data for their own purposes.
- Neon — our PostgreSQL database, hosted in Frankfurt (EU). Stores your random ID, session logs, and streak data.
- Railway — runs the backend API that serves your feed. Processes your data in transit.
- Vercel — hosts the Byte website. Collects anonymised page view metrics (IP stripped at source, not personal data).
Your rights
Under GDPR you have the right to access, correct, delete, and restrict processing of your data. Here's how to exercise each:
- Delete your data — tap Settings in the Byte app and choose "Delete my data." This removes your streak, session history, and all personalisation instantly. Your random ID is replaced and you continue as a new anonymous reader.
- Access your data — email privacy@bytenews.eu with your random ID (find it in Settings → your ID). We'll respond within 30 days.
- Change your consent — go to Settings in the app and toggle reading behaviour tracking on or off at any time.
- Lodge a complaint — you can complain to your national data protection authority. In Germany, this is the BfDI.
How to find your random ID
Your random ID is stored on your device — not in an account. To find it: open Byte → tap Settings → your ID is shown at the bottom of the settings panel. Copy it and include it in any data access request so we can find your records.
How long we keep your data
Session logs and reading behaviour data are automatically deleted after 90 days. Your streak is kept as long as your random ID exists in your browser — it's deleted immediately when you choose "Delete my data," or if you clear your browser's local storage.
Data collected before this policy
Byte started collecting anonymous session data in early 2026 to power reading streaks. This privacy policy was published in April 2026. If you used Byte before this date and want to delete your data, use the "Delete my data" button in Settings — it works regardless of when the data was collected.
Changes to this policy
If we make material changes (new data collected, new purpose, new processors), we'll update the date at the top of this page and notify active users via a brief notice in the app. Small clarifications won't be announced.