Introduction
This website and the Ranex project are operated by Anthony Garces, the founder, through his development company Anito (see About Ranex for who is accountable here). Ranex ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use this website and the Ranex kernel. There are only two ways this site takes information you actively provide: the contact form, and the design-partner sign-up hosted by our newsletter provider. Analytics passively measures behavior as disclosed in Section 8. Everything below follows from that.
1. Information We Collect
1.1 Information You Provide
- Contact Form: Your name, email address, subject, and message. These are delivered to our support inbox as an email. They are not written to a database.
- Newsletter and Design-Partner List: The email address you give to Beehiiv, our newsletter provider, when you sign up for field notes or apply as a design partner. That sign-up form is hosted by Beehiiv, not by us, and the list lives in their system.
That is the entire list. This website is informational. There is no sign-up, no sign-in, no user account, no password, no payment detail, and no license key. If we ever introduce any of those, this policy will be updated before it happens.
1.2 Information Collected Automatically
- Server Logs: Our host records ordinary web-server request data for each visit: IP address, browser user agent, the page requested, and the time.
- Spam Protection: When you submit the contact form, your IP address and browser user agent are held briefly in server memory to rate-limit repeat submissions, and your IP address is included in the email we receive so we can identify abuse.
- Cookieless Analytics: Our self-hosted Umami analytics records anonymized pageviews, scroll depth, read time, and link or button clicks (see Section 8).
- Cookies: This site sets none. There is no session to keep and no cookie-based tracking script to feed (see Section 8).
1.3 Your Code
The kernel runs entirely on your machine.
- Your code never leaves your device
- Evidence, the gate catalog, and the journal are files in your own repository
- No code, evidence, or verdict is transmitted to our servers
- We collect zero information about your code
- A stated invariant of the project is that removing every model credential from the machine must not change a single verdict: judging your code calls no model and no cloud service
2. How We Use Your Information
We use collected information to:
- Read and answer the messages you send through the contact form
- Send the field notes and design-partner updates you signed up for, with an unsubscribe link in every email
- Operate and maintain this website
- Detect and block spam and abuse of the contact form
- Comply with legal obligations and enforce our Terms of Service
We do not use your information to build a profile of you, and we do not use it for advertising.
3. Data Sharing and Disclosure
We may share your information with:
3.1 Service Providers: Three vendors handle data on our behalf: the company that hosts this website, the email provider that delivers contact-form messages to our inbox, and the newsletter platform that holds the design-partner list. They are named in Section 9. We use no payment processor; the analytics described below are self-hosted.
3.2 Legal Requirements: When required by law, subpoena, or legal process, or to protect our rights and safety.
3.3 Business Transfers: In connection with a merger, acquisition, or sale of assets. You will be notified of any change in ownership.
3.4 With Your Consent: We may share information for other purposes with your explicit consent.
We DO NOT:
- Sell your personal information to third parties
- Share your source code with anyone (it is never uploaded)
- Use your data to train AI models
- Receive your verdicts, evidence, or journal. They stay in your repository
4. Data Security
The strongest protection here is how little we hold:
- Encryption in Transit: This site is served over HTTPS, and contact-form messages are delivered to our inbox over an encrypted connection.
- No Credential Store: There are no accounts and no passwords, so there is no credential database to breach.
- No Personal-Data Database: We run none. Contact messages sit in an email inbox read only by the people who answer them; the design-partner list lives with our newsletter provider.
- Infrastructure: This website is hosted on managed cloud infrastructure, patched and operated by the host named in Section 9.
- Signed Evidence: In your own repository, evidence records carry Ed25519 signatures verified against a committed public keyring, and the verdict journal is append-only and hash-chained. That record is yours; we never receive it.
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
5. Data Retention
Contact Messages: Kept in our support inbox as long as needed to answer you and keep a record of the exchange. Ask us and we will delete the thread.
Design-Partner Sign-Ups: Held by our newsletter provider until you unsubscribe, then removed from the mailing list.
Server Logs: Kept by our host under its own retention schedule. We do not copy them into any other system.
Spam-Protection Records: The rate-limit entry for a contact-form submission lives in server memory only, and is gone when the window expires or the server restarts.
Verdicts and Evidence: Never held by us. They live in your repository and you control their retention entirely.
6. Your Rights and Choices
You have the right to:
- Access: Request a copy of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of what we hold about you (your contact messages, and your address on the mailing list (subject to legal retention requirements)
- Export: Receive a copy of the information we hold about you
- Opt-Out: Unsubscribe from marketing emails (link in every email)
- Restrict Processing: Limit how we use your data
- Data Portability: Receive your data in a structured, machine-readable format
To exercise these rights, contact us at support@ranex.email.
7. International Data Transfers
Ranex is operated from Singapore. This website is served from our host's global network, and the providers named in Section 9 process contact messages and the mailing list on their own infrastructure, which may sit outside your country. If you write to us or apply as a design partner, your information may be transferred to and processed in Singapore and in the countries those providers operate from. Their privacy policies describe the safeguards they apply to such transfers.
8. Cookies and Tracking
This site sets no cookies. There is no sign-in cookie, because there is nothing to sign in to. There are no preference cookies, because there is nothing to remember.
We use self-hosted, cookieless Umami analytics. It sets no cookies, does not track you across sites or sessions, and is not connected to ad networks. We measure anonymized pageviews and engagement events such as scroll depth, read time, and link or button clicks. IP addresses are used only transiently for aggregate session counting and geography, not to identify individuals. We do not sell data.
If you follow the design-partner link, you leave this site for our newsletter provider's own page. What that page does with cookies is governed by their policy, not this one.
9. Third-Party Services
We use the following third-party services:
- Edge network and DNS: Cloudflare (see Cloudflare Privacy Policy). The application itself is self-hosted through Dokploy.
- Newsletter and Design-Partner List: Beehiiv (see Beehiiv Privacy Policy). The sign-up form is on their site, and they hold the list.
- Email Delivery: An SMTP provider that carries contact-form messages to our support inbox
- Analytics: Self-hosted Umami, as described in Section 8.
These services have their own privacy policies. We are not responsible for their practices.
10. Children's Privacy
Ranex is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at support@ranex.email.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, and shared
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell data)
- Right to non-discrimination for exercising your rights
To exercise these rights, contact us at support@ranex.email.
12. GDPR Compliance (European Users)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
- Legal Basis: We process your data based on consent, contract performance, and legitimate interests
- Data Protection Contact: Write to support@ranex.email
- Right to Lodge a Complaint: You may file a complaint with your local data protection authority
- Data Transfers: Data leaving the EEA is processed by the providers named in Section 9, under the transfer safeguards set out in their own privacy policies
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on this page
- Updating the "Last updated" date
- Telling design-partner list subscribers by email, if the change is a material one
If we ever start collecting something this policy does not describe (accounts, payments, or analytics among them), this page will say so before that collection begins. Your continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us: