Privacy policy

Personal profile

Your About me text stays in browser storage and, if you use account sync, your encrypted vault. An approved AI connection gets only the sections you select. Edits to those sections update the shared copy. We do not add the text to public profiles, group packs, analytics, or logs.

Freeform text is not screened for sensitive facts. Review each section before sharing. The gateway can read approved remote projections when serving a connection. Revoking access cannot recall copies already received.

1. Private fingerprint

Your choices and full map are saved in browser storage and in your encrypted vault. Encryption happens in your browser. Project Fingerprint does not receive your vault password or open vault key. Approved AI copies are separate from the private vault.

2. Core preference votes

When you choose between eligible items in a normal-sensitivity core domain, the service also stores the normalized pair, your preferred item or a Neither response, catalog version, event identifier, and timestamps. These votes are readable, linked to your account, and retained for the account lifetime for future aggregate analysis. Project Fingerprint does not submit ratings, confidence, patterns, manual takes, skips, notes, imports, protected-domain choices, or the encrypted fingerprint.

3. Account data

An account stores your email, Terms acceptance, session records, encrypted vault, wrapped vault keys, and core preference votes. Deleting only the encrypted vault does not delete the preference votes. Deleting the account does.

4. Public Network data

Your handle, profile, public posts, comments, collections, follows, and reactions are readable by the service. They are public only when you choose to publish them. Your private map stays separate.

5. Encrypted social data

Messages, private comparison packs, and group contributions are encrypted in your browser. The service stores ciphertext and delivery data. A message report includes only the messages that the reporter submits.

6. AI connections

An AI connection gets a separate approved copy of selected taste data. The gateway can decrypt that copy only to serve an authorized request. It stores an audit result, not the prompt or reply. See AI sharing.

7. Analytics and operations

Google Analytics runs only on public information pages and is separate from the signed-in choice feed. We also keep limited security, rate limit, delivery, and error records. We do not sell personal data or use private maps or messages to train a public model.

8. Delete data

You can delete a public item, your Network profile, an AI connection, the server vault, or the full account. See Data deletion.