Privacy Policy

Refs.Gallery (“we”, “us”) respects your privacy. If you have questions or requests, contact us at info@refs.gallery.

What we collect#

• Newsletter email — when you subscribe, your email address is processed and stored in Resend to deliver the weekly curated website digest.
• Website submissions — when you submit a website, we store the website URL, your email address and any note you add, so we can review the submission and tell you if it is published.
• Usage and diagnostics data — pages viewed, approximate device/browser info, performance metrics, and error reports.
• Basic request metadata — IP address and standard headers may be processed for security, abuse prevention (rate limiting), and reliable delivery.

Why we collect it#

• To send the newsletter and service communications you requested.
• To review website submissions and email you about their status.
• To operate, secure, and improve the website (performance, reliability, and abuse prevention).
• To understand aggregate usage (e.g., which pages are popular) and prioritize improvements.

Legal basis#

Where applicable (e.g., GDPR), we process newsletter emails and optional analytics cookies based on your consent, website submissions to respond to the request you made, and we process security/performance data based on our legitimate interests in operating and protecting the service.

Service providers#

We use third‑party providers to run and improve the service:

• Hosting / CDN: the site is hosted on infrastructure such as Vercel (server logs and request metadata may be processed for delivery and security).
• Content backend: subscription emails and website submissions are stored in our content backend (Sanity).
• Analytics: we may use privacy‑focused analytics (e.g., Vercel Analytics) to understand aggregate usage.
• Product analytics: we use PostHog (EU Cloud, data stored in the EU). Without consent it runs cookieless, counting page views and a few named actions with an anonymous, daily‑rotating identifier; once you accept analytics cookies it also uses cookies, records clicks and heatmaps, and records sessions with form inputs masked. We also use it to measure usage and cost of the AI model that drafts project descriptions, without sending prompts or outputs.
• Session analytics: Microsoft Clarity may be enabled on the production site for usage insights and session replay analysis.
• Web analytics: Yandex Metrica (including Webvisor session recording) may be enabled on the production site once you accept analytics cookies.
• Error monitoring and logs: we use Sentry and PostHog (EU Cloud) to diagnose errors and improve reliability, and PostHog to store server logs. Email addresses, tokens and other secrets are removed before error reports and logs are sent.
• Tag management: Google Tag Manager may be enabled on the production site.

Cookies and similar technologies#

We may use cookies or similar technologies for basic functionality, analytics, and performance measurement. Some of these are set by third‑party services listed above. Analytics that set cookies or record sessions (Google Tag Manager, Yandex Metrica, Microsoft Clarity, PostHog and Sentry Session Replay) only run after you accept them, and you can change your choice at any time with Cookie settings in the site footer.

Learn more in our Cookie Policy.

Retention#

Resend retains newsletter subscription data until you unsubscribe or request deletion. Resend global unsubscribe removes you from all Broadcasts in the current single newsletter stream. Operational logs and analytics are retained for a limited period depending on provider settings.

Website submission details (URL, email and note) are kept with the submission record while it is reviewed and, if it is published, for as long as the project stays in the gallery. You can ask us to delete them at any time.

Your rights#

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to certain processing.

International transfers#

Our providers may process data in different countries. Where required, we rely on appropriate safeguards offered by those providers.

Contact#

For privacy requests, contact us at info@refs.gallery.