Back to Postneedle

Privacy

Last changed 20 September 2026

Postneedle reads the post you type and shows you five readings. It keeps as little as it can. This page says exactly what happens to what you type and to your email, if you leave one.

Who runs this

Postneedle is run by Alejandro Carbajo, an independent developer in Spain. For anything on this page, write to hello@postneedle.com.

The text you type

• Each time you pause typing, the text in the box is sent to the Postneedle server, which passes it to TypeSafe AI (a company in the United States) so its Jev model can read it. The readings come back and are shown to you.
• Postneedle does not store your text. It is not written to a database or to logs. The logs keep the length of the text, the five readings, the model version and how long it took.
• For up to ten minutes the server remembers a fingerprint of the text (not the text itself) together with its readings, so the same post is not read twice.
• TypeSafe processes the text to produce the readings. Under its customer terms it does not use customer data to train models without consent, and it may process data to detect abuse and to meet legal duties. Its policy is at typesafe.ai/legal/privacy-policy.
• Because the text leaves your device, do not type anything private, and do not type other people's personal information.

Your email, if you leave one

• When you press one of the buttons that ask for something (the extension, your own needles, membership, team use, sponsoring), the click is counted. If you also leave your email and a note, those are stored with the kind of request and the time.
• For a request, we use your email to reply or tell you when the requested feature exists. For a scouting feed, we send your private feed link through Brevo. If you choose trial reminders, we also email two days before the trial ends and when it ends. You can stop these emails using the link in each message. Creating a feed does not subscribe you to a marketing list; we do not sell your email.
• It is stored with Cloudflare, which hosts this site. Brevo processes your address and email content to deliver scouting emails and records delivery and unsubscribe events. We retain your email preference and delivery status to avoid unwanted or duplicate messages. To have your data deleted, write to the address above from that email.

Your connection

• Your IP address is used in memory to keep one visitor from using everyone's share: a limit per minute and per day. It is not written to storage and it is forgotten when the day ends or the server restarts.
• Cloudflare, as the host, handles your connection and keeps its own short-lived technical logs.
• The typefaces load from Google Fonts, which means your browser contacts Google to fetch them.
• Visits are counted: how many page views and first-time connections per day, and which site sent them. Discovery source-post opens are also counted, with repeated opens from the same connection and post counted once per day while the server remains running. These aggregate counts hold no addresses or profiles.
• There are no third-party analytics or advertising trackers. An optional operator-exclusion cookie keeps our own checks out of usage counts; essential service cookies may also be used.

What this site remembers in your browser

If you switch a needle off, that choice is stored in your own browser (local storage, not a cookie) so the page remembers it next time. These preferences stay on your device. You can also choose to save up to six discovery searches on this device; removing a saved search or clearing browser data removes it. A saved query is sent to Postneedle only when you run that search.

Optional discovery measurement

In Find's Usage preferences, you can opt in to measuring repeat use. It is off by default. A marker on your device records your choice, its start time and the first source open, search save or saved-search use. It expires after 30 days. Only an action type and a yes/no return-after-24-hours signal are sent, not the stored timestamps, search text or a persistent device identifier. Daily aggregate counts are deduplicated by connection in memory. They are approximate and cannot identify unique people or prove that a post was read. Unticking the option removes the local marker and stops these events; already aggregated counts cannot be linked back to remove them. Browser Do Not Track and Global Privacy Control preferences keep this optional measurement off.

The blind test

If you take the blind test at /rate, your yes and no answers are saved under a random number created in your browser, so one person is counted once. No name, email or address is saved with them. The number stays in your browser's storage until you clear it. Write to hello@postneedle.com to have your answers removed; tell us the number, which you can read in your browser's storage as postneedle.rater.

The daily awards

If you enter a post in the daily awards, you give us a link to a public post on X. We fetch its text, your display name and your handle from X's public embed service, read it with the needles, and publish them with the readings on the awards pages. Entries are kept for about 13 months. Write to hello@postneedle.com from any address, with the link, to have an entry removed.

Account readings

If an X handle is typed into the account reader, we ask X's official API for that account's last 20 public posts, read them with the needles, and keep the result: the handle, display name, the averaged readings, and the text and readings of those posts. Anyone viewing an account page can publish its card as a share link; the card image is drawn in their browser and the video never leaves it. Account pages are not listed in search engines. Accounts that score 60 or more appear on the public leaderboard. If it is your account and you want it removed, write to hello@postneedle.com.

Payments

The full report and "read it now" are single payments, and a scouting feed is a monthly subscription; all are taken by Stripe on Stripe's own page, sold by Alejandro Carbajo. Postneedle never sees your card. Stripe tells us that a payment for a given X handle or feed was completed, and we keep that fact so the report or feed stays unlocked. A paid report or feed is reachable by anyone who has its address. A scouting feed keeps the search you typed and your email, to send you nothing but what you asked for. Refunds and cancelling: terms, or hello@postneedle.com.

Community needles

A needle you publish in the library is public: its name, question, criteria, and the X handle you chose to give, if any. It is reviewed automatically before it is listed. Needles you add to your own meters are remembered in your browser only. Uses are counted per needle, once per connection per day, without storing who used it. Write to hello@postneedle.com to have a needle of yours removed.

Share cards

A share card is drawn in your browser. Saving it, copying it or sending it to an app keeps it on your device. If you choose Post on X, Post on LinkedIn or Copy link, the card image (which shows the text of your post) and its readings are uploaded and published on a public page at postneedle.com/r/, so the network can show the card in your post. That page is kept for one year and is not listed in search engines. Write to hello@postneedle.com with the link to have it removed sooner.

Your rights

If you are in the EU or the UK you can ask for a copy of what is held about you, have it corrected or deleted, and object to its use. The only thing held is the email and note you chose to leave. Write to the address above. You can also complain to your data protection authority; in Spain that is the AEPD.

What the needles are

The readings are a model's judgment of a draft, offered as a mirror for your own writing. They are not proof of how any text was written and should not be used to accuse anyone of anything.