Privacy policy

Who we are

Recall Weekly is operated by Moss and Metric LLC (“we”, “us”), which is responsible for the personal information described here. Recall Weekly is a U.S. service; your information is processed in the United States.

What we collect

• Account information: your email address, and whether and when you confirmed it.
• Alert preferences you give us: the audiences you pick (for example, parent or pet owner), and — if you add them — brands, product types, retailers, states, allergens, and vehicles (make, model, year, and optionally a VIN). Allergen choices can reveal health-related information; we use them only to match recalls to you.
• How you found us: when you sign up, the page you first landed on, the website that referred you, and any campaign tags in the link.
• Email activity: a record of which recalls we’ve emailed you about, so we don’t send duplicates, and whether you’ve unsubscribed.
• Payment information: if you subscribe to Always-on, payment is handled by our payment processor, which acts as the seller. We receive your email address and subscription status — never your card details.
• Technical information: standard server logs (such as IP address, browser type, and pages requested), which our hosting provider keeps briefly for security and reliability. We use your IP address to rate-limit sign-in and signup requests.

How we use it

To send you the Sunday Brief and any alerts you’ve asked for; to match recalls to your preferences; to sign you in; to process your subscription; to keep the service secure and prevent abuse; to understand, in aggregate, which pages and campaigns bring people to the site; and to answer you when you contact us. We don’t use your information for advertising.

Cookies and analytics

We set one cookie, to keep you signed in. Our site analytics are cookieless and count visits in aggregate; they don’t track you across other websites. Our signup and sign-in forms use a bot check from our hosting provider, which may evaluate browser signals to tell people from automated traffic. We remember how you arrived at the site in your browser’s session storage until you close the tab, so we can record it if you sign up.

Who we share it with

We don’t sell your personal information, and we don’t share it for targeted advertising. We disclose it only to service providers that process it on our behalf and under contract — for website hosting and storage, email delivery, payment processing, site analytics, and error monitoring — and when the law requires it.

Some features send non-personal lookups to outside services: a barcode you scan is looked up in a public product database, and a VIN you add is decoded by the U.S. government’s public vehicle database. Recall text (never your information) is processed by an AI service to write our plain-English summaries.

If Recall Weekly is ever sold or merged, your information may transfer to the new owner under this policy.

How long we keep it

We keep your account and preferences until you delete your account. If you unsubscribe, we keep your email address so we can honor the unsubscribe. Our record of emails sent is deleted after 90 days; sign-in codes after 24 hours. Deleted data can remain in backups for up to 30 days.

Your choices and rights

• Stop emails: use the unsubscribe link in any email. It takes effect immediately.
• See or change your information: sign in to your account page.
• Delete everything: use “Delete your account” on the account page, or email us. If you have an active paid subscription, cancel it first.
• Get a copy of your data, or ask any other question about it: email us.

Depending on where you live (including California and other U.S. states with privacy laws), you may have the right to know, access, correct, and delete your personal information, and to opt out of its sale or sharing. We don’t sell or share it, and we treat a Global Privacy Control signal as an opt-out request anyway. We’ll verify requests by confirming you control the account’s email address, and we won’t treat you differently for making one.

Children

Recall Weekly isn’t directed to children under 13, and we don’t knowingly collect their personal information. If you believe a child has given us information, email us and we’ll delete it.

Security

We protect your information with reasonable safeguards — encrypted connections, sign-in codes stored only in hashed form, and signed session cookies — but no system is perfectly secure.

Changes

If we make material changes to this policy, we’ll update the date above and tell subscribers by email or on the site before they take effect.