Privacy policy

Last updated: 13 August 2026

Broadsheet is a read-it-later service operated by Marginal Utility. This policy covers the Broadsheet website, browser extension, iOS app, Android app, and share extensions (together, the “service”). It explains what personal data we process, why we process it, and the choices you have.

Data we collect

We process the following data when you use Broadsheet:

Account data: your email address, name or profile details if provided, authentication provider, and a stable account identifier. Clerk handles sign-in and account management.
Library data: URLs, article titles, authors, images, extracted article text, tags, highlights, notes, sources, AI summaries you request, reading progress, archive state, and timestamps. Imports may also include data supplied by another read-it-later service.
Email preferences: your verified email address, digest frequency, and delivery history when you enable a digest.
Subscription data: Stripe customer and subscription identifiers, plan status, renewal date, and cancellation state. Broadsheet does not receive or store your full payment-card number.
Technical data: request data, device and browser details, approximate location derived from an IP address, page views, performance traces, and error reports. Error reports may contain the page or operation that failed, but Sentry Session Replay is disabled.

Browser extension and mobile apps

When you choose to save a page, the browser extension reads the active tab’s URL and rendered HTML, then sends them to your configured Broadsheet server over HTTPS. This lets Broadsheet save pages that require a sign-in or are rendered in the browser. It does not collect your general browsing history, form entries, or content from tabs you have not asked it to save.

The extension stores its server URL in browser sync storage and uses the browser’s existing Broadsheet session to authenticate. The iOS app stores downloaded articles and library metadata on your device for offline reading. Its share extension stores queued save requests and a short-lived Broadsheet session token in the app’s shared container and Keychain access group.

The Android app sends URLs you explicitly share with Broadsheet to the server over HTTPS. Clerk stores the Android authentication session on your device so the app can request short-lived session tokens.

How we use your data

We use this data to:

create and secure your account;
save, organize, sync, export, and display your library;
fetch source feeds and check saved articles for changes;
generate an article summary when you explicitly request one;
send digests you have enabled and process unsubscribes;
rank articles using aggregated saves and reading activity for community newsletters, without identifying individual readers;
manage paid subscriptions and provide Supporter features;
measure service use, diagnose faults, prevent abuse, and improve reliability; and
meet legal, accounting, and security obligations.

We do not sell your personal data, use it for targeted advertising, or use saved article content to train generative AI models.

Our legal bases

Under UK data-protection law, we process account, library, email, and subscription data because it is necessary to provide the service you request and perform our contract with you. We process security, limited analytics, and diagnostic data for our legitimate interests in operating a safe and reliable service. We process records when necessary to meet legal obligations. Where the law requires consent, you may withdraw it at any time without affecting earlier processing.

Service providers

We share only the data needed to run Broadsheet with these providers:

Clerk for authentication and account management;
Vercel for hosting and privacy-focused usage analytics;
Supabase for hosted database infrastructure;
Stripe for payment and subscription management;
Resend for service and digest email delivery; and
Sentry for error reporting and performance monitoring; and
OpenRouter and its selected AI model provider to process an article’s title and extracted text only when you request an AI summary.

These providers may process data outside the UK. Where they do, we rely on legally recognized safeguards such as adequacy regulations or approved contractual protections. We may also disclose data when required by law, to protect users or the service, or as part of a business transfer where the recipient continues to honor this policy.

Cookies and local storage

Clerk and Broadsheet use cookies and similar device storage to keep you signed in, protect requests, remember your theme and preferences, support offline use, and record whether you have dismissed the cookie notice. These functions are necessary to provide the service. Vercel Analytics measures aggregate page usage without building advertising profiles. Broadsheet does not use advertising cookies.

Retention and deletion

We keep your account and library data while your account is open. Deleting your Marginal Utility account triggers deletion of your Broadsheet library, preferences, and local subscription record. You can clear downloaded articles from the iOS app at any time. Backup, security, payment, and accounting records may remain for a limited period where needed for recovery, fraud prevention, dispute handling, or legal compliance. Our service providers retain data under their own documented retention schedules.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal data. Broadsheet provides a data export in Settings. You can change newsletter preferences in Newsletters and unsubscribe from any edition using its unsubscribe link.

To exercise another right or ask a privacy question, contact us using the details below. UK users may also complain to the Information Commissioner’s Office.

Children

Broadsheet is not directed to children under 13, and we do not knowingly collect their personal data. Contact us if you believe a child has provided personal data through the service.

Changes to this policy

We may update this policy as the service or legal requirements change. We will update the date above and give reasonable notice of material changes through the service or by email where appropriate.

Contact

Broadsheet is operated by Marginal Utility in the United Kingdom. For privacy requests, questions, or complaints, email support@marginalutility.dev.