Privacy Policy

Passages ("we", "us", "our") is operated by Thiago Bueno. This privacy policy explains how we collect, use, and protect your information when you use passages.ink and the Passages browser extension (together, the "Service").

We believe in straightforward language. No legalese, no tricks — just clarity about what we do with your data.

What we collect

Account information. When you create an account, we collect your name and email address. We use this to authenticate you and to send transactional emails (like password resets).

Saved content. When you save an article through our browser extension or the web app, we store the article's content, URL, title, and metadata. This is the core of what Passages does — preserving articles for your reading.

Browser extension data. The Passages browser extension extracts article content from web pages you choose to save. It only activates when you explicitly save an article. It does not track your browsing history, monitor your activity, or collect data from pages you don't save.

Publications. When you create publications (ebooks), we store the publication metadata and the generated files so you can download them.

Usage data. We use Umami, a privacy-focused analytics tool, to collect anonymous, aggregated usage statistics on our landing page. Umami does not use cookies, does not collect personal information, and does not track you across sites. No analytics are currently collected within the authenticated application.

What we don't collect

• We don't show ads.
• We don't sell your data to anyone.
• We don't use tracking cookies or third-party trackers.
• We don't build advertising profiles.
• We don't collect data from pages you haven't explicitly saved.

How we use your information

We use your data to:

• Provide and maintain the Service (saving articles, generating ebooks, managing your account).
• Send transactional emails related to your account.
• Improve the Service based on aggregated, anonymous usage patterns.

We do not use your data for marketing, advertising, or profiling.

Third-party services

We rely on a small number of trusted services to operate Passages:

These services process data only as necessary to provide their function. We do not share your personal data with any other third parties.

Cookies

Passages uses only a session cookie required for authentication. We do not use advertising cookies, tracking cookies, or any third-party cookies.

Data storage and security

Your data is stored on servers located in the United States. We use HTTPS encryption for all data in transit and follow industry-standard security practices to protect your data at rest.

Data retention and deletion

We retain your data for as long as your account is active. When you delete your account, all your personal data — including saved articles, publications, and account information — is permanently deleted. We are committed to providing an instant deletion mechanism.

Your rights

For users in Brazil (LGPD)

Under the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados), you have the right to:

• Confirm whether we process your personal data.
• Access your personal data.
• Correct incomplete, inaccurate, or outdated data.
• Request anonymization, blocking, or deletion of unnecessary or excessive data.
• Request data portability.
• Request deletion of data processed with your consent.
• Obtain information about third parties with whom your data is shared.
• Revoke your consent at any time.

For users in the European Economic Area (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access your personal data.
• Rectify inaccurate personal data.
• Request erasure of your personal data.
• Restrict or object to processing of your personal data.
• Data portability.
• Withdraw consent at any time.

Our legal basis for processing your data is the performance of our contract with you (providing the Service) and your consent where applicable.

Exercising your rights

To exercise any of these rights, contact us at privacy@passages.ink. We will respond within 15 days for LGPD requests and within 30 days for GDPR requests, as required by law.

International data transfers

Your data is processed and stored in the United States. By using the Service, you acknowledge that your data will be transferred to and processed in the United States, where data protection laws may differ from those in your country. We take reasonable steps to ensure your data is treated securely and in accordance with this policy.

Changes to this policy

We may update this privacy policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you by email.

Contact

If you have questions about this privacy policy or your data, reach out to us at privacy@passages.ink.

Passages is built by Thiago Bueno.