Privacy Notice

• Account data — name, email address, and login credentials, used to create and secure your account (legal basis: contract performance).
• Published content — the values, methods, and descriptions you publish. Provenance change records attribute changes to your account email, visible only to you; the public sees "contributor".
• Usage and device data — IP address, device identifiers, and telemetry, used for security, fraud prevention, and product improvement (legal basis: legitimate interests).
• Support messages — anything you send us when asking for help (legal basis: contract performance and legitimate interests).

Payment data (card numbers, billing address) is collected and processed directly by Paddle as Merchant of Record; we never see or store your card details.

• Service providers — hosting, database, and analytics subprocessors that operate the Service under contract.
• Paddle — our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance, and invoicing.
• Professional advisers — legal and accounting, where needed.
• Authorities — where required by law.

The census, methods registry, and change log are public and readable without an account — that is the product. Personal data is not part of the public surface: contributor identity is shown as "contributor" to everyone except the account that made the change.

We keep account data while your account is active. Published values and the provenance change log are retained as the integrity record of the Service; if you close your account, personal identifiers are removed or anonymised where they are no longer needed, while the published numbers remain as labeled records.

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls in the database, and least-privilege access to production systems.

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. To exercise any of these, contact us at the address below — we respond within one month. If you are in the UK or EEA, you also have the right to complain to your supervisory authority. Where data is transferred outside the UK/EEA, we rely on appropriate safeguards such as standard contractual clauses.

We use essential cookies and local storage only — to keep you signed in and remember your preferences. We do not use advertising or cross-site tracking cookies.

Data controller: 2OGS LLC. For any privacy question or request, email privacy@provgate.com.