Privacy policy

Last updated: 13 October 2026

The short version

• Browsing TrustLetters needs no account. We use no analytics and no tracking cookies.
• When you connect a newsletter, we read totals only: subscriber counts and per-issue figures such as deliveries, opens and clicks. We never collect your subscribers’ names or email addresses.
• Your platform key or token is encrypted and never shown to anyone, including you.
• Nothing about your newsletter is public until you publish it, and you choose which optional numbers appear.
• You can unpublish, disconnect or delete your listing at any time.

Who is responsible for your data

TrustLetters (trustletters.com) is run by Eduard Arnau, Spain, the controller of the personal data described here. Contact: hello@trustletters.com.

What we collect and why

Everyone who visits

The site itself stores nothing about visitors. Our hosting provider keeps standard server logs (such as IP address, browser type and the page requested) to operate the service and protect it against abuse. Publisher logos and advertisement images are loaded from the web addresses their owners provide, so those servers also receive your IP address when you view them.

Publishers who connect a newsletter

• Platform credentials: the API key, OAuth token or Ghost Admin key you provide, and for Ghost the site address. They are encrypted (AES-256-GCM) on our server and used only to read your newsletter’s statistics.
• Newsletter statistics: the publication’s name and identifier, active and paid subscriber totals, and for your latest regular sends (up to ten): send dates and totals for delivered emails, unique opens, unique clicks and unsubscribes. We store one snapshot per day.
• Profile details you write: newsletter and publisher name, description, topic, language, links, an optional public business email, logo URL, sponsorship formats and prices, audience description and past sponsors.
• A session cookie (lp_session, HttpOnly, 7 days) that keeps you signed in to manage your listing. It is created only when you connect a newsletter or sign in, and it is strictly necessary for that feature.

We do not request subscriber names, email addresses or profiles. Two platforms return a minimal record alongside a total we ask for: Kit includes one subscriber row with the subscriber count, and Ghost returns one member ID with each member count. We discard these immediately and never store them.

Administrators

Email address, name and a salted password hash for the people who run the site.

Advertisers

Advertising is paid through Stripe. Stripe collects your payment details under its own privacy policy; we never see your card number. We receive the business and contact details Stripe shares with us, the payment status, and the advertisement you send us.

Security

To limit abuse we count recent attempts for some actions. For sign-in attempts the counter is keyed by the email address entered. Counters expire within minutes to an hour.

Legal bases

• Providing the service you asked for (performance of a contract): connecting your newsletter, syncing statistics and running your account or ad.
• Your consent: publishing your media kit and showing optional metrics. You can withdraw it at any time by unpublishing or hiding a metric.
• Legitimate interests: keeping the service secure and preventing fraud, such as inflated or fake statistics.
• Legal obligations: keeping payment and invoicing records for advertising.

What becomes public

When you publish, your media kit shows your profile details, active subscribers, growth, the optional metrics you leave switched on, the source platform and the time of the last update. Hidden metrics are removed on our server and never sent to public pages. Public pages can be copied or cached by others, for example search engines or link previews on social networks, and we cannot recall those copies.

Who we share data with

We do not sell personal data and we do not use advertising trackers. We use:

• our hosting and database providers, which store and process data on our behalf;
• Stripe, for advertising payments;
• the newsletter platform you connect (beehiiv, Kit, Mailchimp, MailerLite or Ghost), which receives our requests made with your credentials;
• authorities, only where the law requires it.

Some of these providers may process data outside your country. Where that happens, we rely on the safeguards the law requires, such as the European Commission’s standard contractual clauses.

How long we keep it

• Credentials: until you disconnect or delete the listing.
• Statistics and profile details: as long as the listing exists.
• Deleting a listing removes it and all its snapshots from our live database at once.
• Sessions: 7 days, or until you sign out.
• Advertising and payment records: as long as tax law requires.

Backups kept by our hosting provider may hold deleted data for a limited time until they are overwritten.

Your rights

You can ask to access, correct, delete or export your personal data, to restrict or object to how we use it, and you can withdraw consent at any time. Email hello@trustletters.com. You can also complain to the data protection authority in the country where you live or work.

Much of this you can do yourself, from the edit page of your listing:

• edit your profile, hide metrics or unpublish;
• disconnect the platform, which deletes the stored credentials;
• delete the listing and all of its history.

You can also revoke our access at the platform at any time: delete the API key (beehiiv, MailerLite), remove the custom integration (Ghost), or revoke the app in your account settings (Kit, Mailchimp). If your session has expired, reconnecting the same publication gives you access to your listing again.

Security

Credentials are encrypted at rest and only used on our server. Sessions are stored as hashes. Passwords are salted and hashed. We use HTTPS throughout. No system is perfectly secure, and we will tell affected people and authorities about a breach as the law requires.

Children

TrustLetters is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

If we change this policy, we will update the date above. For significant changes we will tell connected publishers on the site before they take effect.

See also our terms of service and how our data works.