Privacy Policy

This site is a static marketing site plus a contact form. As of the date above it sets no advertising cookies, runs no third-party trackers, and embeds no third-party scripts. If that changes, this page changes with it.

• Colour scheme preference. Your dark or light choice is stored in your browser’s local storage under the key grallumae-theme. It never leaves your device.
• Contact form submissions. If you use the form, we receive the name, email, company, topic and message you enter. It is delivered to our inbox and used only to reply to you.
• Server logs. Our hosting provider records standard request logs such as IP address, user agent and requested path, for security and abuse prevention.

• We do not currently sell, rent or licence your personal information to anyone.
• No product of ours runs advertising or ad networks at the time of writing.
• We do not use cross-site or fingerprinting analytics.
• We do not send marketing email unless you asked for it.

These describe current practice, not an eternal commitment. Some of our products may be funded by purchases or advertising in future; what would not change is the data model, because a product whose premise is that your data stays yours cannot quietly become one that rents it.

Our products store data in databases and object storage operated by our infrastructure providers, including Cloudflare and Supabase. Access is restricted to the people operating the services and is limited to what is required to run them.

Where a product encrypts user data so that we cannot read it — bottlemail encrypts recipient addresses and looks them up through a keyed blind index — that property is intentional. Those values cannot be recovered by us.

Depending on where you live, you may have rights to access, correct, export or delete personal information we hold, and to object to certain processing. Because most of our products are invite-only groups rather than public services, the fastest route is usually to ask the group owner or to use the deletion control inside the product.

To make a request about this website, email c543e4@protonmail.com. We aim to respond within 30 days.

Contact form submissions are retained only as long as needed to reply to you and to keep a record of the conversation. Server logs are retained for a short operational window. Product data is retained until you delete it or, for invite-only groups, until the group is removed.

Our products are intended for users aged 13 and over. We do not knowingly collect information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

If this policy changes materially, the “last updated” date above changes and the changelog on this site records it. We do not quietly rewrite a policy to say something new.