Privacy

The only personal data this site keeps for longer than a minute is an email address, and only if you hand one over through the newsletter form. It lives in Resend, which is what sends the mail, and it is used for nothing but the newsletter. Submitting the form is the consent, and there is no other route onto the list: nobody is added here because they commented somewhere or turned up in an exported contact list. Vercel hosts the site and counts page views without cookies or any identifier that survives between visits, so there is nothing to consent to and no banner asking you to.

The like button on an article stores a count and nothing about who clicked it. To stop a script inflating that count, the rate limiter holds a truncated hash of your IP address for sixty seconds and then drops it, in Upstash in the EU, which is where the counts live too. The address itself is never stored, and the hash is never tied to what you read. Two things are kept in your browser and neither leaves it: the theme you picked, and a note of which posts you have liked, so the heart is still filled when you come back.

Every email carries an unsubscribe link, signed so it cannot be used to remove an address that is not yours, and it takes one click with no login and no reason required. Unsubscribing marks the record rather than deleting it, deliberately: the mark is what stops a later sign-up or import quietly putting you back. If you would rather it were gone altogether, or you want to see what is held, ask at btrindadedeabreu@gmail.com and I will do it myself, as there is nobody here to escalate it to.

How the site itself is built is in the colophon.