Privacy

Privacy Policy

Last updated 3 August 2026

NewsCura is a small operation, and this policy is short because there genuinely is not much to tell. We do not sell your data, we do not run third-party ad trackers, and you can read the entire site without an account.

What we collect

If you never create an account: nothing that identifies you personally. Your browser is counted in aggregate analytics (below), and that is it.

If you create an account: your email address, first and last name, and username, because you typed them in. Your password is stored only as a one-way hash — we cannot read it, and neither can anyone who obtains the database. If you sign in with Google or Facebook instead, we receive your name and email address from them and store no password at all.

What you do while signed in: which curations you follow, which digests you save, your display preferences (theme, font, feed layout), and whether you want the daily email. That is the whole list — it is what makes the product work.

If you write to us: messages sent through the Contact or Feedback forms are stored with the name and email you supply, so we can reply.

Cookies

We set three, and only one of them requires you to be signed in.

newscura_session — proves you are signed in. Set when you log in, expires after 30 days, and is unreadable to JavaScript.
nc_curation — remembers the last edition you were reading, so the site frames itself around it next time.
newscura_oauth_state — a short-lived value used only during a Google or Facebook sign-in, to verify the request came back from where it started. It is deleted as soon as sign-in finishes.

Your display preferences are also kept in your browser's local storage so the site renders correctly before it knows who you are. Clearing your browser data removes all of this.

Analytics

We use Google Analytics to see roughly how many people visit and which pages they read. It tells us that a page was read, not who read it. We have no interest in following individuals around, and we do not run advertising or retargeting pixels.

Other companies involved

Resend delivers the daily email. If you are opted in, they process your email address to send it.
Google and Facebook handle sign-in, if you choose to use them.
Google reCAPTCHA may protect the Contact and Feedback forms from spam.
Buy Me a Coffee provides the support widget, which loads a script from their servers.
The publishers we link to. Article thumbnails are usually loaded directly from the original publisher, which means their servers see that a request came from your browser — the same as if you had visited them. Following a link takes you to their site, and their privacy policy applies once you are there.

The daily email

You are only sent the daily briefing if you asked for it. Every email carries a one-click unsubscribe link that works without signing in, and you can change your mind any time at Preferences. We do not send anything else, and we never pass your address to anyone but the delivery provider above.

Getting your data out, or deleted

Email hello@newscura.com and ask. We will send you a copy of what is stored against your account, or delete the account outright, whichever you want. There is no form to fill in and no retention trick — deleting means the row goes.

Children

NewsCura is not aimed at children under 13, and we do not knowingly keep accounts for them. If one exists, tell us and it will be removed.

Changes

If this policy changes in a way that matters, the date at the top changes with it. Questions about any of it go to hello@newscura.com.

What we collect

If you never create an account: nothing that identifies you personally. Your browser is counted in aggregate analytics (below), and that is it.

If you write to us: messages sent through the Contact or Feedback forms are stored with the name and email you supply, so we can reply.

We set three, and only one of them requires you to be signed in.

newscura_session — proves you are signed in. Set when you log in, expires after 30 days, and is unreadable to JavaScript.

nc_curation — remembers the last edition you were reading, so the site frames itself around it next time.

newscura_oauth_state — a short-lived value used only during a Google or Facebook sign-in, to verify the request came back from where it started. It is deleted as soon as sign-in finishes.

Your display preferences are also kept in your browser's local storage so the site renders correctly before it knows who you are. Clearing your browser data removes all of this.

Other companies involved

Resend delivers the daily email. If you are opted in, they process your email address to send it.

Google and Facebook handle sign-in, if you choose to use them.

Google reCAPTCHA may protect the Contact and Feedback forms from spam.

Buy Me a Coffee provides the support widget, which loads a script from their servers.

The publishers we link to. Article thumbnails are usually loaded directly from the original publisher, which means their servers see that a request came from your browser — the same as if you had visited them. Following a link takes you to their site, and their privacy policy applies once you are there.