Privacy Policy

Oxynote is open-source software you run yourself. This policy covers the website at oxynote.io and the Cloud waitlist. It does not cover a self-hosted Oxynote instance, which runs on your own infrastructure and sends nothing to us.

Who We Are

The site and the waitlist are run by the maintainers of the Oxynote open-source project. We are the controller for the processing described on this page. For anything about your data, write to [email protected].

What We Collect and Why

Waitlist. When you join, we store your email address and the time you joined. We use the address for one thing: to email you when Cloud opens, plus at most a few updates about Cloud before then. Legal basis: your consent. You can withdraw it at any time by writing to [email protected], and we will delete your address.

Bot protection. The waitlist form runs a Cloudflare check that tells people from bots, and it loads when you open the Cloud tab. The check reads your IP address and signals from your browser, which Cloudflare processes as described in its Turnstile privacy addendum. Legal basis: our legitimate interest in keeping the list free of spam.

Hosting. Cloudflare serves the site. To deliver pages and block abuse, it processes your IP address, browser user agent, the page you request and the time. We keep no access logs of our own. Legal basis: our legitimate interest in running the site and keeping it available.

Visitor statistics. Cloudflare counts page views for us without cookies. It records the page, the page you came from, your browser and your country, and we see only totals. Legal basis: our legitimate interest in knowing which pages people read.

Cookies and browser storage. One functional cookie remembers that you dismissed the announcement bar, for up to a year. Your theme choice stays in your browser's local storage and is never sent to us. There are no advertising or tracking cookies.

GitHub. The star count in the navigation comes from GitHub's public API. Your browser fetches it when the page loads, so GitHub receives your IP address and user agent under its own privacy statement. We receive nothing from that request.

Who Else Sees It

Cloudflare hosts the site, stores the waitlist and runs the bot check. An email service provider sends the waitlist emails. Both act as our processors under contract. Where data leaves the EU, the transfer is covered by the EU-US Data Privacy Framework or the EU's standard contractual clauses.

We do not sell your data, and we share it with no one else.

How Long We Keep It

Waitlist addresses: until Cloud launches and you have been told, or until you withdraw your consent, whichever comes first. Within 30 days of launch we will delete the list, unless you have opened a Cloud account by then.

Hosting and bot-check data: we keep none ourselves. Cloudflare keeps it under its own retention terms.

Your Rights

Under the GDPR you can ask for a copy of your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable form. Write to [email protected] and we will answer within 30 days. You can also complain to the data protection authority in the EU country where you live or work.

Changes

When this policy changes, we will update this page and the date at the top.