Privacy & GDPR

The project controller is Dr. Luca Loperfido. Contact info@ocubrief.com for privacy questions and rights requests; incoming mail is forwarded to the project owner. This notice was updated on 20 September 2026.

Reading requires no account. Watchlists, saved articles and preferences are stored in your browser when you use those features. If you subscribe, we store your email, language, selected interests, consent timestamp and notice version in Cloudflare D1 restricted to the EU. We use this information only for the update you requested, based on your consent (GDPR Article 6(1)(a)). Email delivery uses Resend with an EU sending region. Email opens and clicks are not tracked by the provider. Your email must be confirmed before editions are sent.

Optional audience analytics are off until you enable them. They record recognised page/topic identifiers, language and a coarse country code. We do not store raw search text, patient data or raw IP addresses in application analytics. Hosting/security providers process technical request information to operate and secure the service under legitimate interests (Article 6(1)(f)).

Vercel serves the application and Cloudflare provides DNS, security, email forwarding and the EU database. Technical processing may involve international locations; provider contractual safeguards apply and EU storage alone is not a guarantee that every processing activity stays in the EU. We do not sell subscriber data or share it with sponsors.

Unconfirmed subscriptions are deleted after 30 days. Confirmed subscriptions remain until cancellation. Minimal suppression records prevent further mail after bounces or complaints. Optional analytics events are retained for 30 days. Daily abuse-prevention hashes expire after two days. You may withdraw consent, request access, correction, deletion, restriction or portability, and complain to your competent supervisory authority. Email info@ocubrief.com; withdrawal does not affect earlier lawful processing.