What we store, why, and how to get it deleted.

Last updated 2026-05-19

envirodocket is run by Sam Ojling as an independent project. The short version: we collect the bare minimum needed to sign you in, remember what you follow, and send you the newsletter you asked for. If anything below is unclear, email hello@envirodocket.com.

• Account email and name when you sign in with a magic link. We use it so the same login works next visit and so your watchlist sticks to you rather than to a browser.
• Digest subscriber email when you sign up for the weekly "closing this week" newsletter. We also store the time you subscribed, the page you subscribed from (for example homepage_form), and a random token used for one-click unsubscribe.
• Watchlist entries: which projects you've chosen to follow, plus the project name, agency, and state needed to render them in your dashboard.
• Free-tier usage counter: the number of AI briefs you read this calendar month. It resets on the first. We use it only to enforce the free quota.
• Billing data, if you start a Pro trial or subscription. Card details never touch our servers. Stripe holds them. We keep the Stripe customer and subscription id, plan, status, and renewal dates that Stripe sends us by webhook.
• Server logs: IP, user agent, request path, and timestamp. Our hosting provider keeps them for a short rolling window so we can debug outages and block abuse.
• Anonymised analytics: page views and conversions via Google Analytics 4 with IP anonymisation. No third-party ad pixels, no session replay, no fingerprinting.

• We don't sell, rent, or trade personal data. There's no ad business here.
• We don't buy email lists, scrape contacts off LinkedIn, or message people who didn't sign up.
• We don't run cross-site tracking pixels or session replay tools.
• We don't put marketing copy in the body of the weekly digest. The digest is the comment periods and an unsubscribe link.

Account email and name sign you in and address you in product email. Watchlist entries render your dashboard. The briefs-consumed counter gates the free quota. Stripe data tells us whether you have Pro. Digest records get read once a week to assemble and send the Tuesday newsletter. After a successful send we stamp last_sent_at so a rerun of the cron the same week is a no-op.

Server logs and analytics stay aggregate. They aren't joined to your account.

Each vendor gets only what it needs to do its job:

• Neon hosts our Postgres database in US East. Everything in section 01 lives there.
• Vercel hosts the web app and runs the cron jobs.
• Resend delivers the magic-link emails and the weekly digest.
• Stripe processes payments and stores card data on its own PCI-compliant infrastructure.
• Anthropic and OpenAI receive prompts built from public NEPA documents and public comments for AI extraction and clustering. We don't include any subscriber or account email in those prompts.
• Google Analytics 4 receives anonymised page-view and conversion events.

We disclose to law enforcement only on a valid US legal request. If that ever happens, we'll note it on this page.

• Account, watchlist, and subscription records stay while your account is active. Delete the account and they're gone within seven days.
• Digest subscribers who unsubscribe stay in the table with unsubscribed_at set so we don't accidentally re-add you. Email the contact below if you want full removal.
• Stripe records follow Stripe's retention. Billing receipts may be kept up to seven years to satisfy tax law.
• Server logs roll off within 30 days at the hosting provider.

You can ask us to:

• Show you what we hold about you.
• Correct anything that's wrong.
• Delete your account and everything tied to it.
• Export your watchlist and subscription details in a portable format.
• Stop sending you marketing email. Every digest carries a one-click unsubscribe link in the body and in the List-Unsubscribe header.

Email hello@envirodocket.com from the address tied to your account. We'll action the request inside thirty days, usually much faster.

envirodocket is built for adult policy, legal, and research work. We don't knowingly collect data from anyone under sixteen. If you think a minor has signed up, email the contact above and we'll remove the record.

If we change anything that affects how your data is used, the "Last updated" date at the top moves. For material changes we'll email active account holders before the change takes effect.

Questions or requests go to hello@envirodocket.com.