Privacy notice
Who is responsible
Promptuaria is operated by Damiano Presa, the controller of the personal data described here.
Write to metacirculardispatches@gmail.com.
What we keep, and why
- Your GitHub identity, when you sign in: your numeric GitHub id, login, display name and avatar address. We ask GitHub for no access to your repositories or private data. We use them to run your account.
- Your Specs and Drafts. Drafts are visible only to you. Published versions are public and permanent (see the Terms).
- Cookies that sign you in: a session cookie and short-lived sign-in cookies, strictly necessary for signing in. No advertising or analytics cookies.
- Server logs: the web server records the requesting IP address, time, requested address and status, kept about two weeks, to keep the service secure and working. The application's own logs record which kind of page was asked for, never its address.
- Backups of the database and of published content, kept on the server and in an encrypted copy elsewhere, to recover from failures.
Product analytics
To understand how Promptuaria is used, our server reports a few events to PostHog Cloud in the European Union: a sign-in, a Spec created, a version published, a public version viewed or downloaded, and a build prompt copied. Events from your account carry Promptuaria's internal account number; events of public pages carry no identifier at all, so we count views, not visitors. No event contains what you wrote, your GitHub login, your IP address or location, and no analytics script or cookie runs in your browser. Our basis for this is our legitimate interest in understanding and improving the service.
Who else processes data
- Hetzner Online GmbH (Germany), which hosts the server.
- GitHub, Inc., when you choose to sign in with GitHub.
- PostHog, which processes the analytics events above in its EU region.
Your rights
You may ask for a copy of your data, its correction or its deletion, or object to its use, by writing to the contact address above. Published versions are public by design; we will consider every request about them. You may also complain to your data protection authority.