Operational beta notice · independent legal review pending

Privacy Policy

This operational notice describes the public content-analysis beta and invite-only personal research layer. It is not legal advice and remains subject to independent privacy and legal review.

Who operates the beta

Internet of Value Research Foundation operates the public website, anonymous content-analysis demonstration, and invite-only personal research experience. Hosting, authentication, database, CRM, and security providers process limited data on its behalf.

Data and purposes

The system may process contact submissions, invite email digests, authentication identifiers and cookies, a UUID DID, consent grants, workshop and credential status, invocation receipts, input length and keyed HMAC, IP-derived abuse-prevention hashes, sanitized saved observations, non-content audit events, and explicitly selected public profile disclosures. These support access control, consent, research operation, abuse prevention, deletion, reliability, and participant-requested publication.

Submitted text and saved observations

Cortisol Checker text and its full result are transient and are not intentionally stored. Anonymous analysis stores only an expiring IP-derived abuse-prevention hash. A verified Wellbeing Identity holder may separately enter one impact score and select canonical identity facet paths; these remain transient unless the participant chooses to save a sanitized observation. Private identity values are not sent to the checker or saved observation. Operational receipts expire after 30 days; abuse-control attempts expire after one day; non-content audit events expire after 12 months. Saved observations remain until the participant deletes them. Infrastructure backups may follow separate provider retention schedules.

Cookies and sessions

Invited members receive a secure, HTTP-only access cookie and a CSRF cookie for the bounded access-session lifetime. The beta does not retain a long-lived refresh token; a new magic link is required after expiry. Logging out clears both cookies.

Website quality measurement

Public marketing and editorial routes send a 25% sample of Web Vital observations and all contact-form start, success, and error outcomes to a first-party quality endpoint. The records contain only the metric or fixed action, numeric value or fixed outcome, rating, navigation type, normalized pathname, and timestamp. They do not contain form values, email, message text, query strings, referrer, IP address, user agent, cookies, or a visitor identifier. Raw records are available only to authenticated Foundation operators as aggregate route and conversion health and are deleted after 30 days. Identity, admin, workshop, expression-creation, and API routes are excluded.

WellbeingIdentity and publication

The private eight-node workshop, completion credential, DID, and public profile are separate records. Completion never requires public disclosure. Public fields require an active publication choice and may be withdrawn. Sensitive facets are private by default; the Foundation does not publish the private workshop or its source evidence.

Your choices

Anonymous visitors may stop before submission and cannot save results. Invited participants may revoke analysis or personal-response consent, delete saved observations, request correction or withdrawal of public disclosures, and ask about access or deletion. Revoking personal-response consent removes saved observations containing a personal response; individual observations can also be deleted directly. Some security and audit records may be retained until their stated expiry. Withdrawal does not automatically remove prior lawful processing or immutable public archives.

Research boundary

The beta estimates language stress load. It does not measure biological cortisol and is not medical, diagnostic, psychiatric, therapeutic, or emergency-care software. Do not submit text that you lack permission to analyze.

Questions and requests

Contact privacy@theinternetofvalue.org. Please do not include unnecessary sensitive information.