Privacy Policy

Last updated: October 9, 2026

1. Who we are

This policy covers rubricary.com, the Rubricary marketing website. Rubricary ("we") is the controller of the personal data described here. You can reach us at support@rubricary.com.

The product itself, at app.rubricary.com, has its own Privacy Policy covering accounts, the validator and the catalog.

2. What we collect

The site has no accounts, forms or comments. It collects the following:

• Server logs. Our host, Vercel, records your IP address, browser and device type (user agent), the page requested and the time of each request. This is needed to deliver the site and keep it secure.
• Language preference. If you pick a language, it is saved in your browser's local storage (rb-lang). It never leaves your device.
• Cookie choice. Your answer to the cookie notice is saved in local storage (rb-consent) so we do not ask again. It never leaves your device.
• Google Analytics 4, only if you accept. See the next section.

The registry data shown on the page (prompt names, scores) is public catalog data. Loading it does not involve any personal data beyond the server log above, and sets no cookies.

3. Google Analytics

If you click "Accept" on the cookie notice, we load Google Analytics 4, a measurement service from Google. If you decline, or ignore the notice, it is not loaded and no analytics cookie is set.

When enabled, Google Analytics sets the cookies _ga and _ga_* (up to 2 years) with a random identifier, and collects:

• pages viewed, time on the page, scrolling and clicks on outbound links;
• the page or site that referred you;
• approximate location (city or region level, derived from your IP address, which Google Analytics does not store);
• device, operating system, browser, screen size and language.

We do not send names, email addresses, or anything you type or paste anywhere, and the site has nowhere to type. We do not use Google Analytics for advertising, remarketing or audience building, and we do not sell data. We use the results to see how many people visit and which parts of the page are used.

4. Why we use it (legal bases)

• Consent (GDPR art. 6(1)(a); LGPD art. 7, I) for Google Analytics and its cookies. You can withdraw it at any time.
• Legitimate interest (GDPR art. 6(1)(f); LGPD art. 7, IX) for server logs: delivering the site, keeping it secure and preventing abuse. You may object (see section 7).

5. Who receives your data

We share data only with the providers that make the site work:

• Vercel Inc., which hosts the site and keeps server logs.
• Google, which, if you accept, provides Google Analytics.

These providers process data under their own terms and privacy policies. We do not sell your personal data.

6. International transfers and retention

Vercel and Google process data in the United States and other countries. Where the law requires, these transfers rely on safeguards such as the EU-US Data Privacy Framework or standard contractual clauses (GDPR chapter V; LGPD art. 33).

Analytics cookies last up to 2 years, and we configure Google Analytics to keep event data for no more than 14 months. Server logs are kept by our host for a short, limited period. Your local storage entries stay until you clear them.

7. Your rights

Under the GDPR (if you are in the European Economic Area, the United Kingdom or Switzerland) and the LGPD (Brazil), you may:

• confirm that we process your data, and access it;
• correct it, or have it erased, anonymized or blocked;
• restrict processing, or object to processing based on legitimate interest;
• receive your data in a portable format;
• know with whom it is shared;
• withdraw consent at any time, without affecting what was done before. Use "Cookie settings" in the footer to change your choice;
• complain to your data protection authority (in Brazil, the ANPD; in the EU, the authority of your country).

To exercise a right, write to support@rubricary.com. Because the site does not identify visitors, we may be unable to find data tied only to a browser cookie unless you can provide its identifier. You can also delete cookies and local storage in your browser at any time.

8. Children

The site is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will delete it.

9. Security

The site is served over HTTPS. No system is perfectly secure, but we limit what we collect so there is little to protect.

10. Changes

We may update this policy. Material changes, especially a new tool or a new place data is sent, will be reflected by a new "last updated" date above, and we will ask for consent again where the law requires it.

11. Contact

Questions or requests: support@rubricary.com.