A small privacy note.
Rubric is a hrih.si lab, run by hrih. For questions, or to have your information removed, email hello@hrih.si.
When you subscribe
The newsletter is sent through Resend. You get a confirmation email first, and your address is stored only after you press Confirm; the link expires after 24 hours. Rubric then keeps your email address, the topics and formats you picked, when you subscribed, a private link to change your mix, and for each edition whether your email was sent.
Your address is also a contact in Resend, on Rubric’s own list. The Resend account is shared with hrih.si, but subscribing to Rubric does not subscribe you to hrih.si’s letters, or the other way round.
Every email links to your mix and to a one-click unsubscribe. Unsubscribing stops the emails and takes you off Rubric’s list in Resend; Rubric keeps the address marked as unsubscribed, so signing up again picks it up. To have it deleted, email hello@hrih.si.
When you submit a link
No name or email is asked for. Rubric keeps the link, your note if you wrote one, the time, and the private tracking link that only you have. The note is read only by the person who runs Rubric: the judges never see it and it is never published. The pipeline that judges stories receives the link alone. If the story makes an edition, it is published like any other, marked as a reader submission, without anything about who sent it.
Limits against spam
Sign-ups and submissions are limited per network and per day. For that, Rubric stores a one-way hash of your network address, made with a secret key, with a count for the day; the address itself is never stored. The counts are deleted after a day. A submission keeps its hash, so repeated abuse can be spotted.
Visitor statistics
To see what people read, Rubric uses Umami, an open-source analytics tool that runs on the same server as the site. It sets no cookies and stores nothing on your device, and the statistics are not shared with anyone. For each page view it records the page address and title, the referring site, your browser, operating system, device type, screen size and language, and an approximate location (country, region and city) worked out from your IP address. Your IP address is not stored. Visits are grouped by an anonymous identifier derived from your IP address, browser details and a secret that changes every month, so you can’t be recognised from one month to the next or across other websites.
It also counts a few actions: newsletter sign-ups, confirmations, changes and unsubscribes, link submissions, articles opened from an edition (with their rank), the RSS and JSON links, “Load more” and filter changes. Never what you type: no address, link or note. The private links of the newsletter and submission pages are cut from page addresses before anything is sent.
On your device
Your theme and your filter choices are stored in your browser’s local storage. When a form comes back with an error, what you typed is kept for that tab (session storage) and put back in the form. There are no cookies and no advertising trackers.
Service providers
Resend sends the emails and holds the subscriber list; read Resend’s privacy policy. The site runs on a server rented from OVH. Its web server keeps no access logs for this site; OVH may keep network and security logs under its own policies.