Home
Privacy Policy for Sombra
Last Updated: June 10th, 2025
1. Introduction
This Privacy Policy explains how Daniel Martin Peddle ("Service Provider", "I", "me", or "my"), a self-employed individual ("Trabalhador Independente") registered in Portugal, collects, uses, and discloses your information when you use my web content archiving service, Sombra ("Service"), including my website and browser extension.
I am committed to protecting your privacy and personal data. As a service provider based in Portugal, I comply with the General Data Protection Regulation (GDPR) and other applicable EU data protection laws.
2. Information I Collect
2.1 Information You Provide to Me
  • Account Information: When you register for an account, I collect your email address and basic profile information as provided by Google, and optionally from Dropbox when connecting an account.
  • Payment Information: If you subscribe to my paid service, I collect payment information, which may include redacted credit card details or other payment method information. This information is processed securely by my payment processor partner, Stripe. We do not process at any time your full unredacted payment information.
  • User Profile: Any additional profile information you choose to provide, such as your preferences or customisations of profiles.
  • Communications: Information you provide when you contact me for support or other inquiries.
2.2 Information Collected Through Your Use of the Service
  • Saved Content: Content from webpages that you choose to save using my Service, including text, images, and metadata.
  • Host Information: I collect and store basic information about websites that users save content from, including hostnames, site names, and logos. This host information is stored separately from user content and is not user-specific, being generic public data.
  • Usage Data: Information about how you use my Service, including the number of articles saved, frequency of use, and features accessed.
  • Device Information: Information about the device you use to access my Service, including browser type, operating system, and device identifiers.
  • Log Data: Server logs that include your IP address, access times, pages viewed, and system activity.
2.3 Cookies and Similar Technologies
We use one functional cookie to operate the service and analyze usage patterns. You can control cookies through your browser settings, although the site requires the one functional cookie to work.
3. How I Use Your Information
I use the information I collect for the following purposes:
3.1 To Provide and Maintain the Service
  • Processing and storing webpage content you choose to save
  • Authenticating users and maintaining user accounts
  • Processing payments for subscriptions
  • Providing customer support
3.2 To Improve and Develop the Service
  • Analyzing usage patterns to enhance features and functionality
  • Monitoring and improving the performance and reliability of my Service
  • Developing new products, services, and features
3.3 To Communicate With You
  • Sending service notifications and updates
  • Responding to your inquiries and support requests
  • Sending marketing communications (with your consent where required)
3.4 For Security and Legal Purposes
  • Protecting against unauthorized access to my systems
  • Detecting and preventing fraud or other prohibited activities
  • Complying with legal obligations
4. Data Retention
I retain your personal data for as long as necessary to provide you with the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
For free users, I store up to 100 saved articles. For paid users, I store either 2000 articles per year for pro subscribers, or a maximum number of articles during the subscription period for supporters. Visible articles will be reduced to the free tier, 100 most recent articles upon lapse of subscription.
The maximum number of articles is governed by our Fair Use Policy and we reserve the right to determine actual limits based on operational factors such as impact on service, costs and overall business requirements.
Account data will be retained for as long as your account is active. If you delete your account, I will delete or anonymize your personal data within 30 days, unless I am legally required to retain certain information.
5. Data Sharing and Disclosure
I do not sell your personal information or the content you save using my Service. I may share your information in the following limited circumstances:
5.1 With Service Providers
I may share your information with third-party service providers who perform services on my behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service.
5.2 For Legal Purposes
I may share information when I believe in good faith that disclosure is necessary to:
  • Comply with applicable law or legal process
  • Protect my rights, property, or safety
  • Protect the rights, property, or safety of my users or others
5.3 With Your Consent
I may share your information with third parties when you have given me your consent to do so.
5.4 Business Changes
If I decide to discontinue my service or transfer it to a new owner, your information may be transferred as part of that transaction. I will notify you via email and/or a prominent notice on my website of any change in ownership or uses of your personal information. This does not affect your right to request deletion.
6. Data Security
I implement appropriate technical and organizational measures to protect the personal data I process. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and I cannot guarantee absolute security.
7. Your Data Protection Rights
Under the GDPR and other applicable data protection laws, you have certain rights regarding your personal data, including:
  • Right to Access: You have the right to request a copy of the personal data I hold about you.
  • Right to Rectification: You have the right to request that I correct any inaccurate or incomplete personal data.
  • Right to Erasure: You have the right to request the deletion of your personal data under certain circumstances.
  • Right to Restrict Processing: You have the right to request that I restrict the processing of your personal data under certain circumstances.
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: You have the right to object to my processing of your personal data under certain circumstances.
To exercise these rights, please contact me using the contact information provided at the end of this Privacy Policy.
8. International Data Transfers
I am based in Portugal, and the information I collect is governed by EU law. If I transfer personal data outside the European Economic Area (EEA), I will ensure that appropriate safeguards are in place to protect your personal data.
9. Children's Privacy
My Service is not directed to children under the age of 16, and I do not knowingly collect personal information from children under 16. If I learn that I have collected personal information from a child under 16, I will take steps to delete such information as soon as possible.
10. Changes to This Privacy Policy
I may update this Privacy Policy from time to time. I will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
11. Contact Me
If you have any questions about this Privacy Policy or my data practices, please contact me at:
Daniel Martin Peddle
CX 208Z Sitio das Areias Moncarapacho 8700-062 Portugal Email: dan@sombra.so VAT Number: PT256958670
Status: Trabalhador Independente (Self-employed individual)
12. Supervisory Authority
If you are located in the European Union and believe I am processing your personal data in violation of the GDPR, you have the right to lodge a complaint with your local data protection supervisory authority. In Portugal, the supervisory authority is:
Comissão Nacional de Proteção de Dados (CNPD) Av. D. Carlos I, 134, 1º 1200-651 Lisboa Portugal Phone: +351 21 392 84 00 Website: www.cnpd.pt