PRIVACY

Release notices. If you request the OBJECT 001 notice, ECHORYN stores the email address, the Object number, the page where the request occurred, request status and timestamps. It is used only for the requested OBJECT 001 notice unless you separately choose something else. Address confirmation will be required before a release email is delivered.

Accounts. If you create or use an account, ECHORYN and its authentication provider process your name, email address, encrypted authentication credentials, session information, optional authenticator-factor information and account preferences such as timezone.

Support. If you email support, the message, address and information you include are processed to answer the request. Never send passwords, authentication codes or full payment-card details.

Site protection. Hosting systems may process IP address, browser and device information, request timestamps and security logs. ECHORYN’s application rate limiter stores one-way hashed request buckets, hit counts and expiration times rather than raw IP addresses.

Essential authentication cookies are used to keep signed-in accounts secure and maintain sessions. ECHORYN does not currently install advertising cookies, behavioral trackers or audience-analytics scripts. The application does not use local storage as the permanent record for accounts, release registrations, orders or ownership.

Information is used to operate accounts, deliver the requested release notice, answer support requests, secure the site and prevent abuse. If physical commerce opens later, this policy will be updated before customer payment and fulfillment data are collected.

ECHORYN does not sell personal information. A release-notice registration does not create an order, reservation, ownership claim or guarantee of availability.

The current site uses OpenAI Sites and Cloudflare infrastructure for hosting, routing, security and application data, and Supabase for account authentication and related emails. Those providers process information only as needed to provide their services under their own terms and privacy obligations.

Payment processing is not active. If checkout is enabled later, the checkout and this policy will identify the payment processor before payment information is submitted. Full payment-card details will not be stored in ECHORYN’s application database.

The production database may retain dormant records created by retired prototypes or earlier private systems, including support conversations, contact or lead details, property-related records, attachment metadata, past subscription or payment identifiers, and connection metadata. The current public application has no routes that create, display or use those records.

Those records are being preserved while their retention and ownership requirements are inventoried. They will not be repurposed for the current ECHORYN service. Deletion or anonymization will occur only after a controlled review confirms that removal is appropriate and will not erase records that must be retained for security, disputes, accounting or legal obligations.

The current ECHORYN application is not an AI service. It does not send account details, release registrations or support messages to an AI model, and it does not use AI to make decisions about visitors. Tools used during site design do not create a separate visitor-data collection purpose.

Release registrations are kept until the requested notice is delivered, the address is removed or the registration is no longer needed. Account information is kept while the account remains active and as reasonably needed to secure or resolve it. Short-lived anti-abuse records are routinely removed after their security purpose expires. Future transaction records may need different retention periods for fulfillment, fraud prevention, disputes, taxes or other legal obligations.

ECHORYN limits collection to what the current service needs, restricts browser permissions, uses encrypted connections, same-origin request checks, rate limits and security headers, and does not store full payment-card details. No online system can guarantee absolute security.

You may request access, correction or deletion of information associated with an account or OBJECT 001 notice request by emailing support@echoryn.net. Identity or address control may be verified before a request is completed; this prevents someone else from removing or accessing your record. Certain security or future transaction records may need to be retained where legally or operationally required.

Automated email-address removal is not offered until a signed confirmation-link system is active. Future release emails will include a functioning address-control and unsubscribe method before delivery begins.

This policy will be reviewed again before checkout, product uploads, analytics or broader marketing are activated. Material changes will be posted here with a new effective date before they apply.