Privacy policy
Last updated October 27, 2026.
Operator and data controller: Andrius Naruševičius, operator of ClearanceBrief, Naugarduko g. 50B-23, LT-03228 Vilnius, Lithuania. Contact: andrew@clearancebrief.com
ClearanceBrief is run from Lithuania (EU), so we handle personal data under the EU GDPR wherever you are. If you are in the United States, the rights below apply to you too, and nothing here limits rights you have under your state's privacy law.
Visitors
You can use the free parts of ClearanceBrief without an account. We keep no personal data about you beyond standard server logs (kept 14 days) and, only if you accept, Google Analytics.
Subscribers
Checkout is run by Stripe (Stripe Payments Europe, Ltd.), which collects your email, name, billing address and payment details under the Stripe privacy policy. Stripe gives us your email address, a customer id and your subscription status; card details never reach us. We store your subscription status and dates, your watchlist of product codes, which alerts we sent you, sign-in times and API keys (only a one-way hash of each key). Lawful basis: contract. We keep account data while you subscribe and for up to 6 years after for tax and accounting records, then delete it.
Cookies
One essential cookie (sid) keeps subscribers signed in; it lasts 6 months from your last visit. consent remembers your cookie choice. Only after "Accept all" do we load Google Analytics 4 (_ga, _ga_*, up to 2 years), with Consent Mode v2.
Sign-in links, daily alerts and weekly briefs are sent by Brevo (Sendinblue SAS, France) as our processor. Brevo adds open tracking (an invisible image) and click tracking (links pass through a Brevo redirect); we can't turn this off on our plan.
Processors
Stripe (payments), Brevo (email), Cloudflare Turnstile (bot check on the sign-in form), Google (analytics, only with consent), Oracle Cloud (hosting, EU). Some of them may process data in the United States under their standard contractual clauses or the EU-US Data Privacy Framework.
We don't sell your data
We don't sell or share subscribers' or visitors' personal information for money or for cross-context behavioral advertising.
California and other US state privacy laws
In the last 12 months we collected these categories of personal information: identifiers (email address, customer id, IP address in server logs), commercial information (subscription and payment status) and internet activity (pages viewed, only with analytics consent). We use them to provide the service, secure it and keep accounts. We don't sell or share personal information, use it for cross-context behavioral advertising, or process sensitive personal information. Residents of California and other states with similar laws can ask to know, access, correct or delete their information and will not be discriminated against for doing so; an authorised agent may ask on your behalf.
Your rights
Access, correct, export or delete your data by emailing andrew@clearancebrief.com. We act within 30 days and won't treat you differently for asking. You can complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt) or, in the US, to your state attorney general.
The FDA records on this site are public U.S. government data about devices and firms. Recall and 510(k) records can name company contacts; we show them as the FDA publishes them. To ask about a record, email us.