Substack shares data primarily with service providers to operate the platform.

Overview
Sells your data No
Shares with third parties Yes
Tracking levelModerate
How Long Data Is Kept

Not clearly disclosed

Where Data Goes
Sent outside EU/EEAUnknown
Who Gets Your Data
Other Third Parties
Not clearly specified who receives your data
Other Third Parties
Not clearly specified who receives your data
Other Third Parties
Not clearly specified who receives your data
Other Third Parties
Not clearly specified who receives your data
Other Third Parties
Not clearly specified who receives your data
Tracking & Analytics
AdQuickParse.ly
What Data Is Collected
33 types
Data TypeCategoryWhy
First Name and Last NameIdentity
Collected during account creation and subscription to identify the user.
your first and last name;
Email AddressIdentity
Collected for account creation, subscriptions, communication, and contact syncing. Also collected from third-party integrations.
your email address;
Phone NumberIdentity
Collected for SMS verification and contact syncing.
your phone number;
Date of BirthIdentity
Collected from user, potentially for age verification.
your date of birth;
Credit Card DetailsFinancial
Collected for processing payments when making a purchase.
your payment details (including billing address, credit card details, where you make a purchase from us);
Billing AddressIdentity
Collected as part of payment details for purchases.
your payment details (including billing address, credit card details, where you make a purchase from us);
Mailing AddressIdentity
Collected from user input.
your location and/or mailing address;
Location DataTechnical
General location information, potentially inferred from IP or provided by user.
your location and/or mailing address;
PhotographIdentity
User-provided image for their profile.
your photograph;
Marketing PreferencesBehavioral
User's choices regarding marketing communications and consents.
your marketing preferences, including any consents you have given us;
IP AddressTechnical
Collected automatically from the browser or device used to access the website.
information related to the browser or device you use to access our website (including your IP address);
Browser or Device InformationTechnical
Information about the browser or device used to access the website.
information related to the browser or device you use to access our website (including your IP address);
UsernameIdentity
Collected during account creation and maintained in association with the account.
any information we collect online from you and maintain in association with your account, such as your username and password;
PasswordTechnical
Collected during account creation for security and access to the account.
any information we collect online from you and maintain in association with your account, such as your username and password;
Subscription Status with Substack PublicationsBehavioral
Information about user's subscriptions to Substack publications.
your subscription status with Substack publications;
Public Social Media Account InformationSocial
Public information from social media accounts associated with the Substack account.
public information about the social media accounts you associate with your Substack account;
Direct Message ContentsCommunications
The actual content of direct messages sent and received on Substack.
your direct message contents and metadata;
Direct Message MetadataCommunications
Metadata associated with direct messages, such as sender, recipient, timestamp.
your direct message contents and metadata;
Third-Party Account IdentifiersIdentity
Account identifiers (e.g., email address) from integrated third-party services like YouTube.
information from integrated third-party services that you choose to use or link to on Substack — for example, if you use Substack to upload video content to YouTube, we collect account identifiers (including the email address associated with the account)
Video IdentifiersOther
Identifiers for video content uploaded via integrated third-party services like YouTube.
video identifiers, and upload status information associated with the YouTube account you use to upload video content to YouTube;
Upload Status InformationOther
Information about the status of content uploads via integrated third-party services like YouTube.
video identifiers, and upload status information associated with the YouTube account you use to upload video content to YouTube;
Information Provided in CommunicationsCommunications
Any other information provided by the user when communicating with Substack (e.g., support, comments, complaints).
any other information you provide us when communicating with us.
Hashed Email Addresses (Contact Syncing)Identity
Email addresses from a user's address book, securely stored as hashed values for contact syncing.
This information collection is strictly limited to email addresses and phone numbers, and any information collected in this manner is securely stored only as hashed values.
Hashed Phone Numbers (Contact Syncing)Identity
Phone numbers from a user's address book, securely stored as hashed values for contact syncing.
This information collection is strictly limited to email addresses and phone numbers, and any information collected in this manner is securely stored only as hashed values.
Strictly Necessary Cookies DataTechnical
Data collected by essential cookies for website functionality, like remembering login details or data provided for a purchase.
These cookies are essential in order to enable you to move around the website and use its features. Without these cookies, services you have asked for such as remembering your login details or data provided for a purchase cannot be provided.
Performance Cookies DataTechnical
Non-personally identifiable data on how users interact with the website, collected for performance monitoring.
These cookies collect information on how people use our website. The data stored by these cookies never shows personal details from which your individual identity can be established.
Functionality Cookies DataTechnical
Data remembering user choices like country, language, and search parameters to personalize the experience.
These cookies remember choices you make such as the country you visit our website from, language and search parameters.
Creator Cookies DataTechnical
Tracking and analytics data collected by cookies set by Creators or third parties (e.g., Twitter, Facebook, Google) on Substack.
In addition to the cookies Substack uses, Creators on Substack may choose to set certain tracking and analytics cookies, subject to the Creator’s own terms and policies. These Creator cookies may include cookies set by third parties such as Twitter, Facebook, Google, AdQuick, and Parse.ly.
Online Activity After Leaving WebsiteBehavioral
Information about user's online activity on other websites after leaving Substack, collected via cookies.
Through cookies we place on your browser or device, we may collect information about your online activity after you leave our website.
User Profile Information (General)Identity
General information populated by the user in their profile, including name, subscriptions, publications, location, and image content.
If your user profile allows it, you may choose to populate certain user profile information, including, without limitation, your name, subscriptions, publications, location, and any image content.
User Subscriptions (visible on profile)Behavioral
Information about a user's subscriptions that may be displayed on their public profile.
If your user profile allows it, you may choose to populate certain user profile information, including, without limitation, your name, subscriptions, publications, location, and any image content.
User Publications (visible on profile)Other
Information about a user's publications that may be displayed on their public profile.
If your user profile allows it, you may choose to populate certain user profile information, including, without limitation, your name, subscriptions, publications, location, and any image content.
Reading History/ActivityBehavioral
Information on what a user has read or is currently reading on Substack.
You may have the option to allow Substack to share information on what you’ve read or are reading on Substack with the public, or with other accounts socially connected to your own, such as your social media followers.
Why Your Data Is Used
Core Service
  • product improvement
    Explicitly states that collected information is used to enhance and improve the services provided by Substack.
    this information allows us to improve the services
  • personalization
    Explicitly states that collected information is used to tailor and personalize the user's online experience.
    customize your online experience
  • communications
    Describes the use of communication methods, including email, to inform users about changes to the privacy policy, which is a core service communication.
    we will alert you to changes by placing a notice on our site, by sending you an email, and/or by some other means.
Deceptive Practices
Obstruction
medium
Privacy Zuckering
high