Privacy notice — explicit draft.
This is a draft template, not legal advice. A deployed BingBong privacy notice will be reviewed by counsel before publication and will reflect operational reality at the time of deployment.
Scope of this notice.
This draft applies to the BingBong staging surface at bingbong.hermanity.dev and to the planned operational surface described in platform, methodology, and governance. The staging surface does not collect personal data. It serves no trackers, no fonts from external CDNs, and no third-party scripts.
What this surface does
- Publishes documentation about the planned system.
- Includes forms that are non-submitting design demos.
- Records no analytics, no telemetry, and no client identifiers.
What the planned system is designed to do
- Issue randomized opaque tokens to participating surfaces.
- Construct cohort-shaped outputs under documented minimum-count thresholds.
- Honor opt-out, access, deletion, and correction through documented paths.
What the planned system will not do
- Issue, sell, or transmit direct identifiers (email, phone, account id, full IP).
- Provide per-user lookups, replay endpoints, or deanonymization APIs.
- Operate as a true anonymization service. Pseudonymization is the design target.
Planned rights behavior.
DESIGN TARGET A deployed system would support opt-out, cohort-level access, deletion of token and identity records, and correction of identity-domain records. The planned rights flow is documented at consumer rights.
Retention targets.
DESIGN TARGET Retention would be bounded by contract and token state. The target behavior removes revoked tokens from cohort construction within a documented propagation window and marks buyer copies out of contract after retention_until.
Not legal advice.
This page is a draft template. It does not constitute legal advice. The deployed version will be reviewed by counsel and will reflect operational reality. The staging surface is pre-launch and serves no personal data.