Privacy Policy

Information we process

Accounts use an email address and authentication information managed by Supabase Auth. Your username, display name, biography, avatar, links, role badge, and join date are public. Bookmarks are private to your account.

Newsletter subscriptions store an email address, selected topics, consent and confirmation timestamps, subscription status, and email delivery records. Contact forms process your name, email, subject, and message.

Purpose and consent

We use account data to provide authentication and saved articles, contact data to respond to requests, and confirmed newsletter consent to send selected reporting. Subscribing is optional and does not require an account. Every newsletter includes an unsubscribe link.

Service providers

The application uses Supabase for authentication, database and file storage, Resend for email, and Vercel for hosting. These providers process data needed to operate their services. Before launch, the owner must document applicable processing terms, hosting regions, and international transfer arrangements.

Analytics and security

Article view records contain an article identifier and time. They do not contain IP addresses, advertising identifiers, or persistent visitor IDs. A session-storage flag reduces repeat counts in a browser tab. Rate limiting uses temporary HMAC-derived network or account identifiers in a separate server-only table. Hosting and email providers may maintain their own operational logs.

Retention

The scheduled cleanup removes article views after 90 days, rate-limit buckets after two days, expired email tokens after seven additional days, completed or failed email jobs and webhook identifiers after 30 days, unconfirmed subscribers after 30 days, and audit logs after one year. The scheduler must be enabled for these limits to apply.

Confirmed subscriptions remain until changed or deleted. Suppression and unsubscribe records are retained to prevent unwanted sending. The owner must set and document retention for delivery records, support correspondence, backups, and provider logs before launch.

Your choices and rights

You can edit your public profile, remove bookmarks, manage newsletter topics, unsubscribe, and delete your account in Settings. Account deletion removes the profile and bookmarks and unsubscribes the account email. It does not automatically erase independent contact correspondence or suppression records. Contact us for access, correction, export, or deletion requests; applicable rights depend on your jurisdiction.

Security

We use access policies, server-side authorization, transport encryption, input validation, and limited retention. No service can guarantee absolute security. Do not send credentials or highly sensitive evidence through the standard contact form.

Contact

For questions or requests, use the contact form. The publication owner must add the applicable legal identity and direct privacy contact before launch.