Privacy policy

What we collect

When you visit the website

Cloudflare delivers the website, protects it from abuse and provides aggregate web analytics. In doing so, Cloudflare receives ordinary network and device information such as your IP address, browser, referring page and requested pages. We use the resulting aggregate measurements to understand site traffic. We don’t install advertising pixels or use this information to build advertising profiles.

Your colour-theme preference stays in your browser’s local storage. over|yonder doesn’t receive it.

We remember which Archivist pages you visit and which Privacy, Piracy and Ownership panels you open before signup, using a random identifier in your browser. We record each page or panel once and preserve the order in which you first saw them. If you join the release list, we link those details to your signup and confirmation status. This helps us understand which pages and policies are useful. It isn’t used for advertising.

When you join the release list

We collect your email address, the choices shown on the form, the time and version of your consent, and records needed to confirm and honour an unsubscribe request. We also keep email-delivery events such as acceptance, delivery, delay, bounce or complaint. Open and click tracking are disabled.

If the link you followed contains campaign labels such as utm_source or utm_campaign, we record those labels and the page where you submitted the signup form. This lets us compare campaigns without an advertising pixel. We don’t record unrelated URL parameters or pages outside the Archivist website.

Cloudflare Turnstile checks that the form is being used by a person. To enforce rate limits on forms, we store keyed, one-way fingerprints derived from the source network address and email address where applicable. We don’t store the source IP address itself in the release-list database.

How we use it

Release-list emails cover confirmation, the paid beta, major availability changes and the Archivist Free release. If you separately select product notes and research invitations, we may also email occasional development notes, surveys or invitations to test Archivist. That second choice is optional.

We also use the information described above to deliver and secure the website, prevent abuse, diagnose delivery failures, respect suppression and unsubscribe requests, compare signup sources, and meet legal obligations. We don’t sell personal information or provide the release list to other businesses for their marketing.

Who processes it

We disclose information only to service providers that operate the website and release list, or when disclosure is required by law:

• Cloudflare hosts and protects the website, provides aggregate analytics and operates Turnstile through its global network.
• Supabase hosts the release-list database and server functions in the United States.
• Resend sends release-list email from infrastructure in the United States.
• Amazon Web Services provides underlying email infrastructure and is configured as a fallback sender in the United States.

These providers may process personal information outside Australia, particularly in the United States and wherever Cloudflare’s global network handles a request.

How long we keep it

We keep an active subscriber’s address and preference records while they remain on the list. After an unsubscribe, we retain the minimum suppression, consent and delivery records needed to prove and honour that choice, investigate abuse and meet legal obligations. Confirmation tokens expire after 24 hours. We remove or de-identify other personal information when it is no longer reasonably needed for these purposes.

Your choices

Every release-list email provides a simple unsubscribe method. Unsubscribing stops both release emails and any optional product or research emails. You can also ask us to:

• tell you what personal information we hold about you;
• correct inaccurate information;
• delete information we no longer need to retain; or
• answer a question or investigate a privacy complaint.

Email hello@over-yonder.tech. We may need to verify that the address belongs to you before acting on an access, correction or deletion request. We’ll acknowledge a privacy complaint and respond within a reasonable period.

Security and changes

We use access controls, encryption in transit, restricted service credentials and encrypted backups to protect release-list information. No online system can guarantee absolute security.

The current website doesn’t take payment or create Archivist customer accounts. We’ll update this policy and provide any required notice before those features collect personal information. Material changes will be dated on this page and, when appropriate, communicated to affected subscribers.