Privacy Policy

1. Who We Are

Nett Daily is a personal finance newsletter operated as an independent publication. When we say "Nett Daily", "we", "us", or "our", we mean the operator of this newsletter and the website nettdaily.com.

We are the data controller for the personal information described in this Privacy Policy. Our contact details are in Section 16.

This Privacy Policy applies to data we collect through our website (nettdaily.com), our newsletter emails, and any related communications.

2. Data We Collect

Data You Provide Directly

Google User Data (Nett Daily YouTube publishing app)

When the Nett Daily team member who manages our YouTube channel signs in to our "Nett Daily" app with Google, the app receives permission to upload videos to the Nett Daily YouTube channel (youtube.upload) and to read that channel's own videos (youtube.readonly). It collects and keeps only a sign-in token for our channel and the ID of each video we publish. It does not collect any data from readers, subscribers or other YouTube users. See section 11.

Data Collected Automatically

Data We Do NOT Collect

• Financial account information, credit card numbers, or any payment details
• Government identification numbers
• Health information
• Biometric data
• Your actual investment portfolio or financial position
• Any data from third-party social media platforms

3. How We Use Your Data

We use the data we collect to:

• Deliver the newsletter — sending your daily Nett Daily issue to your inbox
• Service communications — sending important notices about changes to our service, Terms, or Privacy Policy
• Improve content quality — analysing open and click rates to understand which stories and formats our readers find valuable
• Personalisation — using your name (if provided) to personalise the newsletter greeting
• Legal compliance — maintaining records required by applicable law, including opt-in records for CAN-SPAM and GDPR compliance
• Fraud prevention and security — detecting and preventing spam, abuse, and unauthorised access
• Publishing our videos (Google user data) — our "Nett Daily" app uses the YouTube permissions granted for our own channel only to upload each day's video to that channel and to check that it is public, so we can show it on the matching issue page. Nothing else (see section 11).

We do not use your data to:

• Sell you financial products or services
• Build advertising profiles or target you with ads on other platforms
• Share with third parties for their marketing purposes
• Make automated decisions that produce legal or similarly significant effects

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

5. How We Share Your Data

We do not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:

Service Providers

We share data with trusted service providers who process data on our behalf (see Section 6 for the full list). These providers are bound by data processing agreements and may only use your data to provide services to us.

Legal Requirements

We may disclose your data if required by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

If Nett Daily is sold, merged, or transfers substantially all of its assets, subscriber data may be transferred as part of that transaction. We will notify you via email before your data is subject to a different privacy policy.

With Your Consent

We will share your data for any other purpose only with your explicit consent.

6. Third-Party Services

We use trusted third-party service providers to operate Nett Daily. These providers are contractually bound to protect your data and may only use it to provide services on our behalf:

We make reasonable efforts to use only service providers with strong privacy practices. We do not use advertising networks, social media tracking pixels, or behavioural targeting services. A current list of our service providers is available upon request by emailing privacy@nettdaily.com.

7. Data Retention

We retain your data for as long as you remain a subscriber to Nett Daily. When you unsubscribe:

• Your email address is removed from our active mailing list immediately
• We retain a record that you previously subscribed (without your email) for up to 3 years to demonstrate anti-spam compliance
• Aggregated, anonymised analytics data may be retained indefinitely
• If you request full deletion of all personal data (see Section 9), we will remove all personally identifiable information within 30 days

Email engagement data (opens, clicks) is retained by our email delivery platform for as long as your subscriber record exists and for up to 2 years after unsubscribing, in accordance with their policies.

8. Security

We take reasonable technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• HTTPS encryption for all web traffic (enforced by our CDN provider)
• API keys and credentials stored as encrypted environment variables — never in code
• Access to subscriber data limited to authorised operators only
• Regular review of third-party service providers' security practices

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your email account.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected subscribers and relevant authorities in accordance with applicable law.

9. Your Rights

Depending on your location, you have the following rights regarding your personal data:

To exercise any of these rights, email us at privacy@nettdaily.com with the subject line "Data Request". We will respond within 30 days (GDPR) or 45 days (CCPA). We may verify your identity before processing requests.

California Residents (CCPA/CPRA)

In addition to the rights above, California residents have the right to:

• Know what categories of personal information we collect and why
• Know whether we sell or share personal information (we do not sell your data)
• Opt out of the sale of personal information (not applicable, as we do not sell data)
• Non-discrimination for exercising their privacy rights

To submit a CCPA request, email privacy@nettdaily.com.

10. Cookies and Tracking

Website (nettdaily.com)

Our website uses its own privacy-first reading stats. They do not use cookies, do not track you across sites, and do not build personal profiles. For each page view we record the page, the site you came from (for example youtube.com), any campaign tag in the link (such as utm_source=youtube), whether you are on a phone, tablet or computer, your country (from our host, Cloudflare), how many seconds you actively read and how far down the page you scrolled. We do not store your IP address, browser details or any ID for you.

To count unique and returning visitors without identifying anyone, your browser keeps one value for our site in its local storage: the date of your last visit. You can clear it at any time by clearing your browser's site data. We use these stats only in aggregate, to see which issues people find worth reading and to improve them.

We do not use Google Analytics, Facebook Pixel, or any other behavioural tracking or advertising technologies on our website.

Some issue pages include our short video from YouTube. We embed it in YouTube's privacy-enhanced mode (youtube-nocookie.com), so YouTube does not store cookies until you press play. Once you play it, YouTube's own privacy policy applies.

Newsletter Emails

Our newsletter emails may contain a tracking pixel — a tiny invisible image that tells us when an email has been opened and records approximate location data based on IP address. Click tracking records when you click links in the newsletter.

This data helps us understand which content our readers find valuable. You can disable email tracking by:

• Turning off "load remote images" in your email client (this disables open tracking)
• Using a privacy-focused email client such as Hey or Proton Mail
• Emailing us at privacy@nettdaily.com to opt out of tracking entirely

11. Google and YouTube API Services

Nett Daily includes a small publishing tool (the "Nett Daily" Google Cloud application) that uploads the short explainer video we make from each newsletter issue, and our weekly roundup video, to our own YouTube channel, youtube.com/@nettdailynews. It uses the YouTube API Services. The only person who signs in to it is the Nett Daily team member who manages our channel; readers and subscribers never sign in with Google and we never request access to their Google accounts. A plain-English overview is on our Nett Daily on YouTube page.

By watching our videos on YouTube you are also subject to the YouTube Terms of Service and the Google Privacy Policy.

What Google user data we access

• Permission to upload videos to the Nett Daily YouTube channel (youtube.upload).
• Read-only access to the Nett Daily channel's own videos (youtube.readonly), used only to check whether a video we uploaded is public.

We do not access anyone else's YouTube or Google data, viewer information, contacts, email, files or any other Google service.

How we use it

Only to publish our own videos and to show each video on the matching issue page and in the matching email. Nothing else.

How we store and protect it

• The sign-in token Google issues for our channel is stored as an encrypted secret in our hosting environment, never in our code or website, and is accessible only to authorised Nett Daily operators.
• The only YouTube data we keep is the ID of each video we published, saved with the issue it belongs to so the issue page can show the video.
• All requests to Google are made over encrypted HTTPS connections.

Sharing

We do not share, sell, transfer or disclose Google user data to anyone. It is sent only to Google itself, as part of uploading our videos.

What we never do with Google user data

We do not use it for advertising (including targeted, personalised, retargeted or interest-based advertising); we do not sell it or give it to data brokers or information resellers; we do not use it to determine credit-worthiness or for lending; we do not build databases from it; and we do not use it to develop, improve or train artificial intelligence or machine-learning models.

Nett Daily's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

• The sign-in token is kept only while we use the publishing tool. We delete it when we stop, and it stops working as soon as access is revoked.
• Video IDs are kept for as long as the issue they belong to is published on our website, and are removed if the video or issue is removed.
• Access can be revoked at any time on Google's third-party access page (also reachable at security.google.com/settings/security/permissions). To ask us to delete any data related to our use of Google APIs, email privacy@nettdaily.com; we will do so within 30 days.

12. Children's Privacy

Nett Daily is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you are a parent or guardian and believe your child has subscribed to Nett Daily, please contact us at privacy@nettdaily.com and we will promptly remove the subscription and any associated data.

13. International Data Transfers

Nett Daily is operated from the United States. If you are located outside the US — particularly in the EEA, UK, or Switzerland — your data will be transferred to and processed in the United States, which may have different data protection laws than your country.

For transfers from the EEA/UK, we rely on the following safeguards:

• Standard Contractual Clauses (SCCs) as implemented by our third-party service providers
• EU-U.S. Data Privacy Framework where applicable

By subscribing to Nett Daily, you acknowledge and consent to this transfer.

14. CAN-SPAM and Anti-Spam Compliance

Nett Daily complies with the US CAN-SPAM Act and international anti-spam laws. Every newsletter we send:

• Identifies itself clearly as a commercial communication
• Includes our physical mailing address: 5900 Balcones Drive, Suite 13220, Austin, TX 78731, USA
• Includes a clear, functional unsubscribe mechanism in every email footer
• Processes all unsubscribe requests within 10 business days
• Is only sent to individuals who have opted in to receive it
• Does not use deceptive subject lines or "from" names

We maintain records of subscriber consent including the date, time, and IP address of opt-in for all subscribers, in compliance with GDPR and CAN-SPAM requirements.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Notify all active subscribers by email at least 14 days before changes take effect
• Update the "Last Updated" date at the top of this page
• Maintain a changelog of significant changes upon request

Continued subscription after the effective date of changes constitutes acceptance of the updated Privacy Policy. If you do not agree to the changes, you may unsubscribe before the effective date.

16. Contact and Data Requests

For any privacy-related questions, data requests, or complaints, please contact us:

If you are in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority (DPA). A list of EU DPAs is available at edpb.europa.eu.