Privacy policy

Gauge Numerics is operated by Ethan Thoma, a sole proprietor in Vancouver, British Columbia, Canada. This page describes what personal information we collect, why, where it goes, and how to have it removed. We handle it under Canada's PIPEDA and British Columbia's PIPA.

What we collect

The preview list. When you join the list we store your email address, a random token that identifies your subscription, and the time you joined. If you choose to answer the optional questions on your subscription page, we also store your company or project, your use case, your expected decision volume, and whether you want a model tuned to your own decisions.

The contact form. Your name, email address and message are sent to us as an email. They are not stored on our server. To filter spam, the form uses Cloudflare Turnstile, which receives your IP address and browser signals.

The Needle API. If you have a preview key, we store the state and questions you send, and the answers returned, for 30 days so we can debug problems and review abuse. We do not use them to train models. We keep request metadata (your key, timestamps, token counts, latency) for billing.

Server logs. We keep no access log of page visits. Error logs can contain an email address when an email fails to send.

Cookies and analytics. The site sets no cookies for visitors and runs no analytics or tracking scripts. Cloudflare, which serves the site, may set its own security cookies.

Why we use it

• To send API keys as preview capacity opens, and occasional research updates.
• To decide who gets preview access first, using the optional answers.
• To reply to messages you send us.
• To run, debug and bill the Needle API, and to stop abuse.

We do not sell your information or share it for advertising.

Who processes it

We use these service providers. Some of them store data in the United States, so your information leaves Canada and may be subject to US law.

• Hetzner hosts our server in Ashburn, Virginia, USA.
• Cloudflare provides DNS, serves the site, runs the Turnstile spam check, and forwards mail sent to our addresses.
• Resend delivers the emails we send.
• Backblaze B2 stores backups of the preview list in its US West region.
• Google (Gmail) is the inbox that receives contact form messages and email to our addresses.

How long we keep it

• Preview list: until you leave the list. Leaving erases your email, token and answers from our live store immediately. Backup copies expire within 8 days.
• Contact messages: in our inbox for as long as the conversation is useful. Ask and we will delete them.
• API requests: 30 days for state, questions and answers. Billing metadata for as long as we need it for accounting and tax records.

Your choices

Every email we send links to your subscription page, where you can edit your answers or leave the list. Email clients that support one-click unsubscribe will remove you with one click. To see, correct or delete anything else we hold about you, email [email protected]. We will reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

Security

All traffic is encrypted with TLS. The server accepts no inbound connections for deployment, and the data directory is readable only by the site's service account. No system is perfectly secure; if we learn of a breach that puts your information at real risk, we will tell you and the regulator as the law requires.

Changes

If we change this policy we will update the date at the top. If a change affects how we use information we already hold, we will email the preview list before it takes effect.

Contact

Questions about privacy go to [email protected].