Informativa sulla privacy

Last updated: September 2026

What we collect

When you create a FeedBro account, we collect your email address and password (stored as a one-way hash, never in plain text). As you use the product, we store the RSS/Atom feed URLs you subscribe to, the interests you select, your Collections, and your reading state (read, saved, read later) for the articles those feeds publish.

We also keep a basic record of how FeedBro is used: the pages you visit on feedbro.com (with the page that referred you and your IP address), when you were last active in FeedBro or its browser extension, and the actions you take in the extension, such as opening or saving an article. We use this to keep FeedBro secure and to understand whether it's working for the people who sign up.

How we use it

Your data is used solely to operate FeedBro: fetching and displaying the feeds you subscribe to, remembering what you've read, and powering features like Discover and Search across your own library. We do not sell your personal data or feed subscriptions to third parties.

Third-party feed content

FeedBro fetches content from RSS/Atom feeds you choose to follow. That content is published by the respective feed owners, not by FeedBro, and is subject to their own terms. We sanitize fetched content before displaying it to protect your browser, but we don't control what those third parties publish.

Cookies & analytics

We keep cookies to a minimum, and we don't use advertising trackers.

Always on, because FeedBro needs them to work:

• feedbro_session keeps you signed in (up to one year).
• XSRF-TOKEN protects the forms you submit (for as long as your session).
• fb_consent remembers your analytics choice, so we don't ask on every visit (180 days).

Only if you allow it: Google Analytics. With your permission, we use Google Analytics to see which parts of FeedBro get used, so we can improve it. It sets the cookies _ga and _ga_<id>, which last up to two years. Google processes this information on our behalf and may do so on servers outside your country; Google states that Google Analytics 4 does not log or store IP addresses. If you choose "No thanks", Google Analytics is never loaded.

Changing your mind. Choose Cookie settings at the bottom of any page. If you withdraw your permission, we remove the Google Analytics cookies and stop loading it.

Sign-in protection. Our login and sign-up pages use Google reCAPTCHA to stop automated abuse. It is subject to Google's Privacy Policy and Terms of Service, and it isn't used anywhere else on FeedBro.

Browser extension. The FeedBro extension records the actions you take in it, such as opening or saving an article. In Firefox, it does this only if you allow the extension's data-collection permission.

YouTube subscriptions import (Google API data)

If you choose “Import my YouTube subscriptions”, FeedBro asks Google for read-only access to your YouTube account (the youtube.readonly scope). We use it once, only to read the list of channels you follow, so you can pick which channels to add as feeds. We do not store your Google access token: it is revoked as soon as the list has been read, and we do not request offline access. We keep only the channels you choose to add, as feeds in your FeedBro account. We do not sell or share this data, use it for advertising, or change anything in your YouTube account. You can also remove FeedBro’s access at any time at myaccount.google.com/permissions.

FeedBro’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we protect Google user data

The only Google user data FeedBro handles is the list of channels you follow on YouTube, read once when you choose “Import my YouTube subscriptions”. We protect it as follows:

• Encryption in transit. Every connection between your device, FeedBro and Google uses HTTPS (TLS).
• No stored credentials. Google’s access token is used once and revoked immediately; it is never written to our database or logs. We do not request offline access or a refresh token.
• Short-lived, private holding. The channel list is kept in temporary storage on FeedBro’s server, tied to your account, for at most 60 minutes so that you can choose from it, and is then deleted. Only the channels you pick are kept, as feeds in your account.
• Restricted access. FeedBro’s servers can be reached only by authenticated FeedBro administrators. Our secrets, including the Google client secret, are kept in the server’s protected configuration and not in the source code. An administrator can view the service as a user only to give support: this is limited to 60 minutes, is recorded, and does not extend to account security, billing or deletion.
• No review and no secondary use. We do not read your list of channels, sell it, share it, use it for advertising, or use it to train artificial-intelligence or machine-learning models.
• If something goes wrong. If we learn of a security incident affecting Google user data, we will notify the people affected and Google without undue delay.

Deleting your FeedBro account removes the feeds and other data in it.

Fetching from your device

Some websites block requests from servers but not from readers. When a feed or article you follow can’t be reached from FeedBro’s servers, the FeedBro app or browser extension may fetch it using your own connection and send the result to FeedBro, where it’s stored and shown like any other feed content. The website then sees a request from your device, as it would if you visited it yourself. Nothing else from your device is sent. You can turn this off at any time in the app’s Settings, or by unticking “Refresh unreachable feeds from this browser” in the extension.

Your rights

You can export your subscriptions as an OPML file at any time from Settings, and you can unsubscribe from any feed individually. Contact us if you'd like your account and associated data deleted.

Contact

Questions about this policy can be sent to [email protected].