Last updated: 24 July 2026

This Privacy Policy explains how THRINV Publishing OÜ (“THRINV”, “we”) collects and uses your personal data when you use the THRINV websites (thrinv.com and its language editions) and the account at account.thrinv.com. We are the data controller: registry code 17528410, Ahtri 12, 15551 Tallinn, Estonia. You can reach us at [email protected].

1. What we collect

Email address — when you subscribe to a newsletter, become a member, or sign in. Signing in is done with a link or one-time code sent to your address.
Name — only if you choose to give it.
Payment data — handled by our processor, Stripe. We receive confirmation and identifiers (such as a customer and subscription ID, your country, and the brand and last digits of your card as Stripe reports them), but never your full card number.
School data — for school plans, the administrator’s email and the number of seats.
Usage data — privacy-friendly analytics (see Cookies) and standard server logs, such as IP address and browser type, kept for security and troubleshooting.

2. Why we use it, and our legal basis

To provide your account and membership and to take payment — performance of a contract.
To send the newsletter you asked for, and transactional emails such as sign-in codes and receipts — consent (newsletter) and contract.
To keep the Service secure and working and to understand aggregate usage — our legitimate interests.
To meet legal and accounting obligations — legal obligation.

3. Cookies and analytics

We keep cookies to a minimum:

thrinv_session — an essential cookie that keeps you signed in across the THRINV language editions (set on .thrinv.com). Membership sign-in cannot work without it. It is not used for advertising or tracking.
Analytics — we use Umami, a privacy-friendly tool that does not set tracking cookies and does not build advertising profiles; the data is aggregated.
Stripe may set its own cookies during checkout to run the payment and prevent fraud.

We do not use advertising or third-party tracking cookies.

We share data only with providers who help us run the Service, under data-processing agreements:

Stripe — payment processing.
Amazon Web Services (SES) — sending transactional email.
Our newsletter infrastructure — sending the newsletter you subscribed to.
Cloudflare — content delivery and security at the edge.
Our hosting provider — the servers on which the sites and databases run.

We do not sell your personal data.

5. International transfers

Some providers (such as Stripe, AWS, and Cloudflare) may process data outside the EU/EEA. Where they do, appropriate safeguards such as the EU Standard Contractual Clauses apply.

6. How long we keep it

We keep account and billing data for as long as you have an account, and afterwards only as long as required for legal and accounting purposes. Newsletter data is kept until you unsubscribe. Server logs are kept for a short period.

7. Your rights

Under the GDPR you can ask to access your data, and to have it corrected, deleted, restricted, or ported, and you can object to certain processing. You can unsubscribe from the newsletter at any time using the link in each email, and change your email or cancel membership from your account. To exercise your rights, email [email protected]. You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or to the supervisory authority where you live.

8. Children

The Service is intended for adults and is not directed at children under 16. We do not knowingly collect data from children.

9. Changes

We may update this Policy from time to time; the “last updated” date shows the current version.

10. Contact

THRINV Publishing OÜ, Ahtri 12, 15551 Tallinn, Estonia
Email: [email protected]

Privacy Policy