Operational beta notice · independent legal review pending
Privacy Policy
This operational notice describes the private state observer, frozen legacy language analysis, and invite-only personal research layer. It is not legal advice and remains subject to independent privacy and legal review.
Foundation operator sign-in
GrowthAdmin accepts only explicitly authorised operators through GitHub or Google. Google sign-in verifies the provider signature, audience, issuer, expiry, a browser-bound nonce and the verified operator email before issuing a secure, HTTP-only Foundation admin cookie for up to eight hours. The Google subject and email are used for operator access; no Gmail or Drive permissions, personal Identity facets or refresh tokens are requested. Google’s sign-in script loads only on signed-out admin screens. Logging out clears the admin session and pending sign-in state.
Field Station feedback and cohort interest
The Field Station form stores names, email addresses, optional feedback, contribution choices, cohort interest and availability, and separate storage, follow-up and update permissions. Authorised Foundation operators may review and export these records to improve the presentation and organise participation. Records are stored privately on Netlify; they are not published or automatically added to the contact CRM. This form does not collect individual time logs. You may request access, correction or deletion at privacy@theinternetofvalue.org. Cohort interest is not confirmed enrollment. Unfinished answers remain in page memory and are cleared when leaving or refreshing.
Who operates the beta
Internet of Value Research Foundation operates the public website, anonymous content-analysis demonstration, and invite-only personal research experience. Hosting, authentication, database, CRM, and security providers process limited data on its behalf.
Data and purposes
The system may process contact submissions, invite email digests, authentication identifiers and cookies, a UUID DID, consent grants, workshop and credential status, invocation receipts, input length and keyed HMAC, IP-derived abuse-prevention hashes, sanitized saved observations, non-content audit events, and explicitly selected public profile disclosures. These support access control, consent, research operation, abuse prevention, deletion, reliability, and participant-requested publication.
Private Wellbeing Identity
When private identity building is enabled, the words, repeatable records and supporting links you add are stored privately in Word Wallet’s existing Supabase service so you can return and edit them. This is a separate storage purpose from the state observer’s temporary reflection text. Added Identity material is retained until you remove it. You can export it and remove the material added through this journey, including its attached evidence. Signed imports, existing publication choices, account records and Value Log records have their own management and retention rules. Building an identity does not complete a workshop or create a validated score. Newly authored material stays private in this beta.
Google entry and ring guides
If you choose Google sign-in, Google and Supabase process your basic sign-in profile and verified email to identify your account. Existing members retain their member identity. Each ring also has written guidance. Choosing Play loads the optional YouTube guide under YouTube’s own privacy terms; the written guide remains available. Identity writing is not included in video requests. Content-free sign-in, signup and save operation counts support reliability: these contain only a fixed operation name, HTTP status and success or error outcome. Hosting providers apply their own log-retention schedules.
State-observer reflection and saved observations
In the V2 state observer, stimulus descriptions, perceptions, recognitions, interpretations, alternative interpretations, and learning notes remain only in React page memory. They are not placed in browser storage, sent to an API, logged, or saved. Reloading or leaving the page clears them. Only explicitly confirmed structured categories, durations, evidence labels, actions, and reported effects may be stored in the owner-private ledger. Saved V2 observations expire after 90 days unless the owner explicitly extends retention. The owner may inspect revisions and hard-delete an observation group. V2 does not read public Wellbeing Identity facet values or update identity.
Legacy language analysis
The separately labelled V1 language analyzer sends submitted text transiently for deterministic rule analysis. Its text and full result are not intentionally persisted by the service; anonymous use retains only an expiring IP-derived abuse-prevention hash. Historical sanitized V1 observations remain readable and owner-deletable under their existing consent and retention terms. Infrastructure backups may follow separate provider retention schedules.
Cookies and sessions
Members receive a secure, HTTP-only access cookie and a CSRF cookie for the bounded access-session lifetime. Wellbeing Identity supports Google sign-in and email links. After the session expires, sign in again; the application does not retain a long-lived refresh-token cookie. Logging out clears the application session cookies.
Website quality measurement
Public marketing and editorial routes send a 25% sample of Web Vital observations and all contact-form start, success, and error outcomes to a first-party quality endpoint. The records contain only the metric or fixed action, numeric value or fixed outcome, rating, navigation type, normalized pathname, and timestamp. They do not contain form values, email, message text, query strings, referrer, IP address, user agent, cookies, or a visitor identifier. Raw records are available only to authenticated Foundation operators as aggregate route and conversion health and are deleted after 30 days. Cortisol Checker and all descendant routes, identity, admin, workshop, expression-creation, and API routes are excluded.
Independence Dialogues advertising measurement
On the Independence Dialogues page only, visitors may choose whether to allow Meta Pixel for campaign measurement. The pixel does not load before permission. If allowed, Meta receives a page-view event and, after a successful RSVP request, a Lead event with the event title. The Foundation does not intentionally send RSVP form fields such as name, email, phone, city, audience type, or delivery preferences to Meta, and advanced matching is not enabled. Meta may use cookies and similar technologies for measurement and advertising under its own terms. The choice is stored in the visitor's browser and may be reset by clearing site data.
Wellbeing Identity and publication
The private eight-node workshop, completion credential, DID, and public profile are separate records. Completion never requires public disclosure. Public fields require an active publication choice and may be withdrawn. Sensitive facets are private by default; the Foundation does not publish the private workshop or its source evidence.
Your choices
Anonymous visitors may inspect synthetic V2 cases or use the legacy analyzer, but cannot record a personal V2 event. Invited participants may revoke state-observation storage consent, inspect revision history, delete a complete observation group, extend retention, request correction or withdrawal of public disclosures, and ask about access or deletion. Some content-free security and audit records may remain until their stated expiry.
Research boundary
The V2 observer organizes participant-reported state transitions without scores or inferred states. It does not measure biological cortisol, validate a stress construct, compute resilience, update identity, or provide medical, diagnostic, psychiatric, therapeutic, or emergency-care advice. The frozen V1 analyzer reports manually authored language-rule signals, not participant physiology.
Questions and requests
Contact privacy@theinternetofvalue.org. Please do not include unnecessary sensitive information.