Privacy & data
This section explains what personal data Thing.pub processes, why, and the rights you have over it. The data controller is Thing.pub Series of Althing LLC (a Texas Series LLC); contact the controller at contact@thing.pub.
What we collect
- Your email address, used as your sign-in (we send one-time magic links; no password).
- Your display name / handle and any social or web links you choose to provide for human verification.
- A device fingerprint for each device you sign in from, used to enforce the device limit and protect against shared or compromised accounts.
- Your activity within the platform: reading progress, annotations, endorsements, applications, and similar interactions.
- Manuscripts you author, which are stored end-to-end encrypted: they are encrypted in your browser, and Thing.pub cannot read their contents.
Why we process it (lawful bases)
- To provide the service you asked for (hosting your account, manuscripts, and reading) and to authenticate you (performance of a contract).
- To keep the community safe: human verification, abuse prevention, device limits, and per-reader watermarking that protects authors' work (legitimate interests).
- With your consent, where you opt in (for example, sharing your email address with an author whose ARC you apply to). You can withdraw consent at any time in Settings.
Who we share it with
We do not sell your personal data. Manuscripts are shared only with the readers an author invites or approves. If you apply to read a book, the author sees your name and your answers; your email address is shown to the author only if you opt in. We use a small number of processors to run the service: database and hosting (Supabase, Fly.io, in the United States) and email delivery (SMTP2GO). Because hosting is in the US, your data may be processed outside your country.
How long we keep it & deletion
We keep your data for as long as your account is active. You can delete your account at any time. When you do, we remove your profile and de-identify interactions that cannot be removed without erasing other members' records (these appear as "User deleted"), and we scrub the personal details from any applications you submitted. Some security and audit records are retained as required for the integrity of the platform.
Your rights
Subject to applicable law (including the GDPR for users in the EU/UK), you have the right to access, correct, export, restrict, or object to the processing of your personal data, and to erase it. To exercise any of these, email contact@thing.pub. You also have the right to lodge a complaint with your local data-protection authority.
Cookies & local storage
We use a strictly-necessary authentication cookie to keep you signed in, and your browser's local storage for non-tracking essentials such as your chosen theme and a device key. We do not use advertising or third-party tracking cookies.
Contact
Questions or concerns about these terms can be directed to Jules Mourne via email contact@thing.pub or through the Substack.