Privacy Policy
Last updated: October 25, 2026
This policy explains how Renews (renews.me, "we", "us") handles personal data when you visit the site. It is written to meet the EU and UK General Data Protection Regulation (GDPR) and the ePrivacy rules on cookies.
Who is responsible
The controller of your personal data is Renews. For any question or request about your data, write to us through our contact form.
The short version
- Renews is a news feed. You can read everything without an account; an account is optional and only keeps your favorite stories.
- For an account we need just an email and a password. We don't ask for your name or any other details, and we don't sell data.
- We don't show ads and don't build profiles of visitors.
- Analytics cookies are used only if you accept them, and you can change your mind.
What we process and why
Server logs.
When your browser requests a page, our servers automatically receive technical data: IP address, date and time, the page requested, the referring page, and the browser and device type. We use it only to deliver the site, keep it secure and fix errors. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Logs are kept for a short period and then deleted; we don't combine them with other data.
Your account (only if you create one).
Your email address, your password (stored only as a one-way hash: we can't see it), the date you signed up, the date and version of the Terms of Use you accepted, and the stories you add to your favorites. We use them to run your account: to sign you in, keep your favorites and send service emails (confirming your address, resetting your password, confirming an email change). We never send newsletters or ads. Legal basis: performing our agreement with you (Art. 6(1)(b) GDPR). While you are signed in, your browser keeps a sign-in token in local storage; it is removed when you sign out.
We keep account data until you delete the account. You can do that yourself at any time on the Account page: the account and its favorites are deleted at once, and you are signed out on all devices.
The contact form.
When you write to us through the contact form, we receive the topic, your email address, the link and the message you enter, together with your IP address and browser type (to fight spam), and your account if you are signed in. The message is emailed to our editors so we can answer you. Legal basis: our legitimate interest in answering you and correcting our stories (Art. 6(1)(f) GDPR). Messages are deleted after three years. To stop spam bots, the form uses Cloudflare Turnstile, which checks your browser when you open the form.
Analytics (only with your consent).
If you click "Accept" in the cookie banner, we use Google Analytics 4 to understand how the site is used: which pages are viewed, how visitors arrive, their approximate location (country or city, derived from the IP address, which Google does not store), device and browser. Google Analytics is not loaded at all until you accept. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time through "Cookie settings" at the bottom of every page. Data is kept for the retention period set in our Google Analytics account, no longer than 14 months.
Your cookie choice.
We store your choice in your browser's local storage so we don't ask again on every page. It contains only "granted" or "denied" and is never sent to us. Legal basis: our legitimate interest and the ePrivacy exemption for storage strictly necessary to respect your choice.
Who receives the data
- Our hosting provider, which runs the servers on our behalf under a data processing agreement.
- Brevo (Sendinblue SAS, France), which delivers our service emails on our behalf. It receives your email address and the content of those emails, and processes them in the EU.
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), only if you accept analytics, as our processor for Google Analytics. Data may be transferred to Google LLC in the United States, which is certified under the EU-U.S. Data Privacy Framework; Google's Standard Contractual Clauses apply as well. See Google's privacy policy.
- Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), only on the contact form, for the Turnstile spam check. It may process your IP address and browser data in the United States under the EU-U.S. Data Privacy Framework.
We don't share personal data with anyone else unless the law requires it.
Links and images
Stories link to the original articles and photo pages on other websites (news publishers, Pixabay). They are loaded only when you click them, and their own privacy policies apply there. Story photos are served from our own servers.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy of it;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to its processing, including processing based on legitimate interest;
- data portability;
- withdraw your consent at any time, without affecting earlier processing;
- lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.
Write to us through our contact form, with the email address of your account if you have one. We answer within one month. For visitors without an account we may need details (such as an IP address and time of visit) to find data relating to you.
Children
The site is a general news service not directed at children. You must be at least 16 to create an account, and we don't knowingly collect data from children; if we learn of such an account, we delete it.
Changes
If this policy changes, we will publish the new version here with a new date. Significant changes to how we use cookies will be asked about again in the cookie banner.