Privacy notice

1. Who we are

ORÆ is a public-draft research project, currently stewarded pseudonymously during its foundation phase. The data controller for any personal data collected through this site is the ORÆ stewardship. Once the project leaves foundation phase, the controller's legal identity will be disclosed here.

For any privacy-related request, contact us through the form on the contact page and mark your message "Privacy request".

2. What we collect

ORÆ only collects data you actively submit through the contact form. The form collects:

• Name — to address you personally in a reply.
• Email address — to respond to your interest.
• Role / profile — to route your interest to the right track.
• Organization or website (optional) — to understand context.
• Interest type, contribution focus, investor range (optional) — to classify the request.
• Message — the substance of your interest.
• Submission timestamp — for auditability.

We do not use cookies for tracking, analytics, advertising, or profiling. We do not load third-party tracking pixels. Fonts and assets are served from this domain.

3. Why we collect it (legal basis)

The legal basis for processing your contact data is your explicit consent (Art. 6(1)(a) GDPR), given by ticking the consent checkbox when submitting the contact form. You may withdraw consent at any time.

The data is used solely to respond to your interest in collaborating with, funding, challenging or contributing to ORÆ — and to classify the request for internal review. It is never used for unrelated purposes, never sold, never shared with third parties for marketing.

4. Where we store it

Until ORÆ Genesis is shown publicly, the contact form operates in prototype mode: submissions are kept in your browser's localStorage and do not leave your device unless you choose to email us directly.

When the form is wired to a production intake (e.g. Formspree, Resend, or our own backend), submissions will be processed by a data processor under a GDPR-compliant contract (DPA). The processor's identity will be disclosed in this notice when activated.

5. How long we keep it

Contact submissions are retained for a maximum of 24 months after the last interaction, unless we are in active conversation with you about a specific role, collaboration, or partnership.

You can request earlier deletion at any time — see section 7.

6. Local storage on your device

ORÆ uses a single local-storage key, orae.interest.submissions.v1, to keep a copy of your form submission on your own device so it isn't lost if the network fails. This data never leaves your browser unless and until the form is wired to a backend.

To clear it manually: open your browser's developer console and run localStorage.removeItem('orae.interest.submissions.v1').

A second key, orae.sigil.seen.v1, holds a single flag (no personal data) so the brand sigil animation only plays once per browsing session.

7. Your rights

Under GDPR, you have the right to:

• Access — request a copy of personal data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — ask us to limit processing.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, without affecting prior lawful processing.
• Complain — lodge a complaint with your national data protection authority (in France: CNIL).

To exercise any of these rights, reach us through the contact form with subject "Privacy request". We aim to respond within 30 days.

8. Security

The site is served over HTTPS. We collect the minimum data necessary and avoid third-party trackers. When wired to a backend, we will choose processors with documented GDPR compliance.

9. Changes to this notice

This privacy notice is a public draft. Material changes are recorded in the project's public log. We will date this page on every update.