This Privacy Policy describes how AutographOS Corp ("AutographOS", "we", "us") handles information collected through autographos.org and its subpages, including the Reality Check quiz (the "Site"). It applies to visitors in the United States, where our services are offered.
AutographOS CorpButtons on the Site such as "Become a Design Partner", "Download the whitepaper", and the "Add to" links for Slack, Teams, and other platforms ask you to sign in with Google before we record your interest. When you do, Google shares your verified email address, your name, and your profile picture with us. We also record which button you clicked and the page you clicked it from, so we know what you were interested in.
If you email us, we keep the email and your contact details so we can reply.
We use Google Analytics 4 to measure how the Site is used. Google Analytics sets cookies and collects your IP address, approximate location, browser and device type, the pages you view, and how you move through the quiz. We use this only in aggregate to improve the Site.
Our hosting providers keep standard server logs, which include IP addresses and request details, for security and troubleshooting.
The quiz stores its verification results in your browser's local storage so pages load faster on repeat visits. This data stays on your device and identifies images in the quiz, not you.
The Site does not accept media uploads from visitors. The images in the Reality Check quiz are ours. When AutographOS verifies a photo, it checks a cryptographic fingerprint of the image against a public registry of signed records. We do not see, store, or sell your media.
We do not use your information for automated decision-making, and we do not send marketing email unless you have asked to hear from us.
We do not sell personal information, and we do not share it with third parties for targeted advertising. We share information only with the service providers that run the Site on our behalf:
| Provider | Purpose | Data |
|---|---|---|
| Google (Sign in with Google) | Authenticating you when you contact us | Email, name, profile picture |
| Google Analytics | Usage measurement | Cookies, IP address, device and page data |
| Supabase | Database and authentication hosting | Sign-in details and your request |
| GitHub Pages | Website hosting | Server logs |
We may also disclose information if required by law, to protect the rights and safety of AutographOS or others, or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information.
Google Analytics is the only service that sets cookies on the Site. You can block or delete cookies in your browser settings, use a content blocker, or install the Google Analytics opt-out browser add-on. The Site works fully with analytics blocked.
We do not respond to browser "Do Not Track" signals because there is no common standard for them, but the opt-out methods above achieve the same result.
We keep sign-in and inquiry records until you ask us to delete them or until 24 months have passed without any contact from you, whichever comes first. Analytics data is retained according to Google Analytics' default settings. Server logs are kept for a short period by our hosting providers.
You can ask us at any time to:
Email trust@autographos.org and we will respond within 45 days. We may need to verify your identity, usually by confirming the email address you signed in with. We will not treat you differently for exercising these rights.
You can also revoke the Site's access to your Google account at any time from your Google account permissions page.
Residents of states with consumer privacy laws, including California, Texas, Colorado, Connecticut, Virginia, and others, have these rights under those laws as well. We do not sell personal information, share it for cross-context behavioral advertising, or process sensitive personal information, so there is nothing to opt out of on those points. If we decline a request, you may appeal by replying to our response, and we will explain the outcome.
All traffic to the Site is encrypted in transit. Sign-in records are stored in a database with row-level access controls, and identity information is taken from Google's signed token rather than from anything a visitor can type. No system is perfectly secure, so we cannot guarantee absolute security, but we will notify you as required by law if a breach affects your information.
The Site is intended for adults and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has provided us information, email us and we will delete it.
We may update this policy as the Site changes. The effective date at the top will change when we do, and material changes will be noted on the Site. Continued use of the Site after a change means you accept the updated policy.
Questions about this policy or your information: trust@autographos.org, or write to AutographOS Corp, 1717 Toomey Rd, Austin, TX 78704.