Terms & Privacy

Last updated: 19 June 2026  ·  Version 1.1

misty. is a hobby project run by one person in Norway. We have tried to make these terms as short and plain as possible. If something is unclear, email us at hi@misty.no and we will explain it in plain language.

1. What misty. is

misty. is a personal news reader. You pick topics, we fetch articles from public RSS feeds, you read them in a clean interface. That is the whole product.

misty. is operated by a private individual based in Norway and hosted on servers in Norway operated by Dedia AS. misty. is not a company and is not operated for profit.

2. Your account

To use misty. you create an account with a username and three words as your password. We do not ask for your name, email address, phone number, or any other personal information.

Your username is chosen by you and does not need to be your real name. It is not published anywhere or visible to other users.

There is no account recovery. If you forget your three words, your account cannot be retrieved. You can simply create a new account.

You can also sign in with Bluesky instead of using a passphrase. If you do, you log in through Bluesky's own official login screen — misty. never sees or stores your Bluesky password. You may pick a misty. username, or let us generate a hidden one and be shown by your Bluesky handle instead. Accounts created with a passphrase can connect or disconnect Bluesky at any time from settings.

3. What data we store

When you create and use an account, we store the following on our server in Norway:

To protect accounts from automated attacks, we temporarily store the IP address and username of failed login attempts, used only to slow down repeated guessing. Beyond that we do not log your IP address, browser type, or device information, and we use no cookies other than the session cookie required to keep you logged in.

We do not sell, share, rent, or transfer your data to any third party for advertising or profiling, and we never build a profile of you.

4. How we use your data

The only purposes for which we use your data are:

We do not build advertising profiles, serve ads, or use your data for any purpose beyond what is listed above.

5. Cookies

misty. uses a single session cookie called misty_session. This cookie is strictly necessary to keep you logged in. It contains no personal information and is deleted when you log out or after 30 days of not visiting. Your account itself remains active until 60 days of inactivity, after which it is permanently deleted (see section 6).

We do not use advertising cookies, tracking cookies, analytics cookies, or any other non-essential cookies. You will not see a cookie banner on misty. because we have nothing to ask your consent for beyond the session cookie, which is required for the service to function.

6. Data retention and automatic deletion

Accounts that have not been logged into for 60 consecutive days are automatically and permanently deleted, along with all associated data (tags, custom feeds, saved articles, any connected Bluesky identifier, and the passphrase hash).

You will not receive a warning before deletion because we do not hold your email address. The 60-day window is generous — if you have not read the news in two months, your account will be quietly removed.

You can also delete your account at any time from the settings page. Deletion is immediate and permanent.

7. Where your data is stored

All data is stored exclusively on servers in Norway operated by Dedia AS. Norway is a member of the European Economic Area (EEA) and subject to the same data protection rules as EU member states under the GDPR.

No data is transferred to servers outside Norway or the EEA.

8. Your rights under GDPR

As a user of misty. you have the following rights under the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven):

To exercise any of these rights, email hi@misty.no. We will respond within 30 days.

If you believe we are handling your data in a way that violates GDPR, you have the right to lodge a complaint with the Norwegian Data Protection Authority:

Datatilsynet
Postboks 458 Sentrum, 0105 Oslo
datatilsynet.no  ·  postkasse@datatilsynet.no

9. Feeds and third-party content

misty. displays article headlines, descriptions and thumbnails from public RSS feeds published by third-party news sources. We only display what publishers explicitly include in their RSS feeds — we do not reproduce full article content. When you tap an article you are taken directly to the original publisher's website.

misty. can also show posts from public Bluesky accounts you choose to follow as feeds. When you add a Bluesky account, our server requests that account's public posts from Bluesky's public API — only public posts are fetched, and only for the account you added. Signing in with Bluesky uses Bluesky's official login (OAuth); we never receive your Bluesky password. Your use of Bluesky is also governed by Bluesky's own terms and privacy policy.

We do not control, endorse, or take responsibility for third-party content, whether from RSS sources or Bluesky. Once you leave misty. you are subject to the terms and privacy policy of that third-party website or service.

When misty. fetches a feed (RSS or Bluesky), the request is made from our server in Norway. The source may log our server's IP address as part of their normal server logging. We have no control over this.

10. Security

We take reasonable steps to protect your data. All connections to misty. are encrypted via HTTPS. Passphrases are hashed using bcrypt and cannot be reversed. The database is stored outside the public web directory and is not accessible via the internet.

However, no system is perfectly secure. misty. holds almost no personal data, so the impact of any breach would be minimal. There is no payment information, no email addresses, and no real identities stored on our servers.

11. Children

misty. is intended for users aged 16 and older. If you are under 16, please do not create an account.

12. Changes to these terms

If we make material changes to these terms, we will update the date at the top of this page. Since we do not hold email addresses, we cannot notify you directly. We recommend checking this page occasionally.

Continued use of misty. after changes are posted constitutes acceptance of the updated terms.

13. Disclaimer

misty. is provided as-is, without warranty of any kind. We make no guarantees about uptime, availability, or the accuracy of third-party news content. As a free hobby project, misty. may be modified, paused, or shut down at any time.

14. Contact

For any questions about these terms or your data, contact us at hi@misty.no. We are a one-person operation and will do our best to respond promptly.