Privacy notice.

Who is responsible

Remco Schoos, founder of Orvial, is responsible for the processing described in this notice. For privacy questions or to exercise a data-protection right, email [email protected]. General product questions can go to [email protected].

This notice covers the website and newsletter. The separate product privacy principles describe how the Orvial application itself is being designed.

Website delivery and security

Orvial is a static website hosted on Cloudflare Pages. When you request a page, Cloudflare may process technical information needed to deliver and protect it, including your IP address, the requested URL, time, browser and device information, and request headers.

This processing is necessary to provide a secure, reliable website and to diagnose abuse or technical faults.

Orvial uses Cloudflare Web Analytics to understand aggregate page usage and performance. Its browser beacon reports information such as host and page path without query strings, referrer host, country, device type, browser, operating system, page-load timing, and Core Web Vitals. Cloudflare states that this service does not use cookies or track individual visitors across websites. Orvial does not use advertising pixels, fingerprinting, session replay, or a second visitor-analytics product.

Newsletter

If you choose to follow the build, the signup form sends your email address to Buttondown, which manages the subscription and sends the newsletter. Double opt-in is used: the subscription becomes active only after you confirm it by email. Buttondown may also record the subscription time, IP address, and referrer-level metadata needed to operate and protect the signup flow.

Newsletter processing is based on your consent. You can withdraw that consent at any time through the unsubscribe link in every newsletter or by contacting Orvial. Open tracking, click tracking, and Buttondown web analytics are disabled for the Orvial publication.

Email contact

When you email an @orvial.app address, Cloudflare Email Routing forwards the message to a Google-hosted mailbox so it can be read and answered. The sender address, message, attachments, and delivery metadata are processed for that purpose. Do not send sensitive information that is not needed for your question.

Local preference

If you change the site appearance, your light or dark choice is stored in your browser under orvial-theme. It is not sent to Orvial and can be removed through your browser settings. This site does not currently set marketing or analytics cookies.

Service providers and international processing

Cloudflare provides hosting, security, DNS, and email routing; Buttondown provides newsletter delivery and subscription management; Google provides the destination mailbox. These providers process information only to deliver their respective services. Processing may take place outside the European Economic Area. The providers describe their safeguards and international transfer arrangements in their own notices:

• Cloudflare privacy policy
• Buttondown privacy policy and data processing agreement
• Google privacy policy

How long information is kept

Newsletter information is kept while you are subscribed and is removed or retained in a minimal suppression record when needed to honour an unsubscribe or legal obligation. Contact messages are kept only as long as reasonably needed to answer the conversation, maintain relevant business records, or meet a legal obligation. Cloudflare, Buttondown, and Google apply their own documented retention periods to operational, security, and backup data.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. Where processing is based on consent, you can withdraw that consent without affecting earlier lawful processing. Send a request to [email protected]. Reasonable identity verification may be required before acting on a request.

You may also lodge a complaint with your local supervisory authority. In the Netherlands, that is the Autoriteit Persoonsgegevens.

Changes

This notice will be updated if the analytics configuration changes or the website gains custom forms, downloads, accounts, or other processing. The date at the top shows the latest material revision.