Privacy Policy

The Short Version

We collect your email address. We use it to send you newsletters. We don't sell your data to anyone.

What We Collect

When you subscribe to Sobhiye, we collect your email address — that's it. We previously had a phone number field for WhatsApp notifications, but that has been removed. If you provided a phone number before, you can request its deletion by contacting us.

How We Use Your Data

Your email address is used for:

• Delivering the daily Sobhiye newsletter
• Sending a welcome email when you subscribe
• Occasional product updates (like new features or changes)
• Click tracking to understand which stories resonate with readers
• Bounce monitoring to maintain email deliverability

Newsletter Analytics

When you click a link in our newsletter, the click is routed through our tracking endpoint (/api/t) before redirecting you to the destination. This helps us understand which stories our readers find most useful.

Data collected per click:

• Subscriber ID (to associate the click with your account)
• Destination URL
• Timestamp
• User-agent and IP address (used for bot detection, not profiling)

We use bot detection (honeypot links and user-agent filtering) to ensure our analytics reflect real human engagement. Click data is not shared with third parties.

Third-Party Services

Sobhiye relies on the following services to operate:

• Supabase — Database hosting for subscriber data and newsletter content. Privacy Policy
• Resend — Email delivery service. Privacy Policy
• Vercel — Website hosting and analytics. Privacy Policy
• Anthropic (Claude AI) — Used for newsletter content generation. No subscriber data is shared with Anthropic. Privacy Policy

Cookies

Sobhiye does not use cookies. Our analytics (Vercel Web Analytics) are cookie-free and privacy-friendly.

Data Security

We take reasonable measures to protect your data:

• Row-level security (RLS) on our database to prevent unauthorized access
• Server-side-only access to subscriber data (never exposed to the browser)
• HMAC-signed URLs for unsubscribe and tracking links
• All traffic served over HTTPS

Your Rights

You have the following rights regarding your data:

• Unsubscribe — Every email includes a one-click unsubscribe link (RFC 2369 compliant). You can also email us to unsubscribe.
• Data deletion — Request complete deletion of your data, including email address and click history.
• Data access — Request a copy of all data we hold about you.
• GDPR rights — If you're in the EU/EEA, you have the right to access, rectify, erase, restrict processing, and port your data.
• CCPA rights — If you're a California resident, you have the right to know what data we collect, request deletion, and opt out of any sale (we don't sell data).

To exercise any of these rights, email us at hello@sobhiye.news.

CAN-SPAM Compliance

Our emails comply with the CAN-SPAM Act:

• The sender is clearly identified as Sobhiye
• Every email includes a working unsubscribe mechanism
• Subject lines accurately reflect the content of the message

Data Retention

• Active subscribers — Your data is retained for as long as your subscription is active.
• Unsubscribed users — We retain your email in an inactive state so you can resubscribe easily. You can request full deletion at any time.
• Click data — Retained indefinitely for aggregate analytics. You can request deletion of your individual click history.

Children's Privacy

Sobhiye is not directed at individuals under the age of 16. We do not knowingly collect data from children. If you believe a child has subscribed, please contact us and we will remove their data.

Changes to This Policy

We may update this policy from time to time. The “last updated” date at the top of this page will reflect the most recent revision. For significant changes, we'll notify subscribers via the newsletter.