Privacy Policy
Last updated: October 12, 2026
Tellafriend runs a referral program for Ghost newsletters. This policy explains what we collect, why, and how long we keep it. Tellafriend is operated by shineunill, Republic of Korea. Contact: kising0529@naver.com.
Two roles
- Newsletter authors (our customers) sign up for Tellafriend. For their account data we are the data controller.
- Subscribers of an author's newsletter. We process their data only on the author's behalf, as a data processor. The author is the controller and decides how their subscribers' data is used.
What we collect
| Who | Data | Why |
|---|---|---|
| Authors | Email address, notification settings | Sign-in links, reward and account emails |
| Authors | Ghost site address and Admin API key | Reading new signups and adding reward labels. The key is stored encrypted and deleted as soon as you disconnect. |
| Authors | Billing details, handled by Paddle | Subscriptions. We never see your full card number. |
| Subscribers | Ghost member ID, UUID, email address, name | Counting referrals and showing each reader their referral page. We copy nothing else from Ghost. |
| Anyone using a share link | Number of clicks per link per day | Showing authors how links perform. No IP address or device data is stored with it. |
What we don't do
- We never email an author's subscribers. Only the author sends newsletters.
- We don't sell data or use it for advertising.
- Referral pages are hidden from search engines, and their links are never shown to anyone else.
Cookies
One cookie keeps authors signed in for up to 30 days. It is required for the service and isn't used for tracking. Referral pages for subscribers set no cookies.
Service providers
We use these companies to run Tellafriend. Each only gets what it needs for its job.
- Render: hosting and database (United States)
- Resend: sending emails to authors
- Paddle: payments, as merchant of record
Where data is stored
Tellafriend is operated from the Republic of Korea, and our servers and database are in the United States. If you are outside the United States, your data is transferred there. We rely on our providers' standard contractual safeguards for these transfers.
How long we keep data
- While your account is active, we keep your referral data.
- If your trial ends without a plan, or you cancel, referral counting stops and we delete your data 30 days later.
- If you delete your account, we disconnect Ghost and delete your API key right away, and permanently delete the rest after 30 days. Signing in again within 30 days cancels the deletion.
- Sign-in links expire after 15 minutes and are removed within a day.
- Records of webhooks from Ghost are removed 30 days after they are processed.
- Database backups are kept for the period set by our hosting provider, Render, and are then overwritten. Deleted data disappears from backups when they roll over.
Your rights
Authors can view and delete their data from Settings, or ask us at kising0529@naver.com. Subscribers should contact the newsletter author first, since the author controls their data; we will help the author respond. Depending on where you live, you may have the right to access, correct, delete, or export your data, and to complain to your local data protection authority.
Changes
We will email authors before material changes take effect.