Privacy

The form on the home page collects your email address. We may also record the technical details that come with any web request, such as your IP address, approximate location, browser, device and the page you arrived from.

We use what we collect to operate, secure, support and improve RebackFM: to contact you about the preview and about the service, to understand how the site is used, to prevent abuse, and for other purposes compatible with running it. We do not sell personal information.

An address is not verified at the point you type it, so anyone could enter any address; that is why an entry on the waitlist grants no access to anything by itself. The form also contains a hidden field that real people never fill in, to catch automated submissions.

This site uses Google Analytics 4, and may use other analytics, measurement and error-reporting services, to count visits, see which pages and referrers bring people here, and improve the site. We do not currently use them for advertising, and advertising storage and personalisation are switched off.

If you are in the EEA or the UK, analytics cookies are not set. This site has no cookie banner, so rather than assume consent we withhold storage for those regions by default. Visits from there are counted in aggregate, without a cookie and without an identifier that follows you between visits. Elsewhere, Google Analytics sets its usual cookies.

You can block analytics everywhere with any content blocker, or by enabling your browser’s Do Not Track / tracking-protection setting. Nothing on this site stops working if you do.

The site is served by Cloudflare, which handles requests and keeps ordinary server logs — including IP addresses — for security and abuse prevention. Typefaces are loaded from Google Fonts, which means Google receives the request for those files, including your IP address, when the page loads.

We use third-party providers to run RebackFM, including hosting and networking, email delivery and routing, storage, analytics, authentication, and language and speech processing, and we share information with them as needed to provide the service.

We may also disclose information to comply with law or a lawful request, to enforce our terms, to investigate suspected fraud, abuse or a security problem, to protect our rights or anyone’s safety, and in connection with a merger, acquisition, financing, or sale of assets.

The app at app.rebackfm.com is separate from this page and is open only to invited accounts. Signing in is handled by Cloudflare Access using your identity provider; we receive your email address from it, and store a display name if you set one, along with the feeds and inbound addresses you create, the newsletters you forward, the scripts and audio produced from them, and records of how the service is used.

We process your content to provide, maintain, secure, support and improve the service. Part of that does not happen on our own machines — see the next section.

We may use aggregated or de-identified information, which cannot reasonably be used to identify you, for any purpose, including developing and improving RebackFM.

Read out verbatim, a newsletter is unlistenable, so the text has to be rewritten into a script before it is voiced. We do that by sending the text of the email you forwarded to a third-party language-model provider, over that provider’s API, and using the script it returns. The voice itself is generated on our own hardware.

So the content of what you forward does leave our servers for that step. We do not publish it, we do not put it on a public feed, and we do not sell it.

What that provider keeps, logs or otherwise does with the text it receives is governed by its own terms rather than by this page, and we do not restate them here. We may change or add providers as the service changes.

We take reasonable measures to protect information, but no website or service can be completely secure, and we cannot guarantee the security of anything you send us or anything we store.

We operate from the United States and our providers may be located elsewhere. Information we collect may be transferred to, stored in, and processed in countries whose data-protection laws differ from those of the country you live in.

We keep information for as long as we need it to run the service, and for a reasonable period afterwards, including to meet legal, accounting, security and dispute-resolution needs. Waitlist addresses are kept until you ask us to remove yours or we no longer need the list. Account data is kept while the account exists and for a period after it closes. Copies may persist in backups and logs for a time after something is deleted.

Email privacy@rebackfm.com and ask. We will remove your waitlist entry or delete your account data, subject to anything we are required or permitted to keep. You do not need to give a reason. If you are somewhere with statutory data rights — for example the EEA, the UK, or California — this is the address to use for them, and we will respond as that law requires.

If you already have an account, Account → Your data exports every episode and sender as a JSON file without asking us.

We process your email address to take steps at your request and to provide the service. We process usage, device and security information under our legitimate interests in operating, securing and improving RebackFM, and we rely on your consent where the law requires it. You can object to processing based on legitimate interests, withdraw consent at any time, ask for a copy of your information or its correction or deletion, and complain to your local supervisory authority. Use the address above.

We may change this policy at any time. The date at the top of this page changes when the text does, and continuing to use this site or the service after a change means you accept the updated policy.