ORÆ

Privacy & data

Privacy notice

ORÆ is a conceptual research and design project. This page describes what personal data we collect, why, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR / RGPD).

Last updated · 2026-06-11 Jurisdiction · EU GDPR Drafted in public

1. Who we are

ORÆ is a public-draft research project, currently stewarded pseudonymously during its foundation phase. The data controller for any personal data collected through this site is the ORÆ stewardship. Once the project leaves foundation phase, the controller's legal identity will be disclosed here.

For any privacy-related request, contact us through the form on the contact page and mark your message "Privacy request".

2. What we collect

ORÆ only collects data you actively submit through the contact form. The form collects:

  • Name — to address you personally in a reply.
  • Email address — to respond to your message.
  • Role (optional) — to understand who is writing.
  • Organization or website (optional) — to understand context.
  • Area of interest (optional) — to classify the request.
  • Message — the substance of your interest.

We do not use cookies for tracking, analytics, advertising, or profiling. We do not load third-party tracking pixels. Fonts and assets are served from this domain.

3. Why we collect it (legal basis)

The legal basis for processing your contact data is your explicit consent (Art. 6(1)(a) GDPR), given by ticking the consent checkbox when submitting the contact form. You may withdraw consent at any time.

The data is used solely to respond to your interest in collaborating with, funding, challenging or contributing to ORÆ — and to classify the request for internal review. It is never used for unrelated purposes, never sold, never shared with third parties for marketing.

4. Where it goes

When you submit the contact form, your entries are transmitted to Formspree (Formspree, Inc., USA), acting as our data processor, which forwards them by email to the ORÆ stewards. This site keeps no database and stores no copy of your submission — Formspree's privacy policy describes their own handling, including GDPR commitments.

The site is hosted by Vercel (Vercel Inc., USA) and served through Cloudflare (Cloudflare, Inc., USA), which provides the CDN, HTTPS and security layer. In that role Cloudflare processes technical connection data such as IP addresses and request metadata to keep the site available and protected against abuse.

The form includes an invisible anti-spam field (honeypot) that involves no tracking and collects no data from humans.

5. How long we keep it

Contact submissions are retained for a maximum of 24 months after the last interaction, unless we are in active conversation with you about a specific role, collaboration, or partnership.

You can request earlier deletion at any time — see section 7.

6. Local storage on your device

The main pages of this site use no local storage at all. Two bilingual pages — the steward's letter and the 404 page — remember your language choice (FR / EN) under a single key, orae.lang.v1. It contains only the value "fr" or "en" — no personal data, no identifier, no tracking.

To clear it manually: open your browser's developer console and run localStorage.removeItem('orae.lang.v1').

7. Your rights

Under GDPR, you have the right to:

  • Access — request a copy of personal data we hold about you.
  • Rectification — correct inaccurate data.
  • Erasure — request deletion of your data ("right to be forgotten").
  • Restriction — ask us to limit processing.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — at any time, without affecting prior lawful processing.
  • Complain — lodge a complaint with your national data protection authority (in Belgium: the Data Protection Authority — APD/GBA, Rue de la Presse 35, 1000 Brussels).

To exercise any of these rights, reach us through the contact form with subject "Privacy request". We aim to respond within 30 days.

8. Security

The site is served over HTTPS. We collect the minimum data necessary and avoid third-party trackers. Form submissions travel encrypted to our processor, and we work only with processors that document their GDPR compliance.

9. Changes to this notice

This privacy notice is a public draft. Material changes are recorded in the project's public log. We will date this page on every update.

← Back to the project