Privacy statement
1. Who is responsible
Ordinate 2D is made by Solapsis, a sole proprietorship (eenmanszaak) of [FULL NAME OF OWNER], [BUSINESS ADDRESS], the Netherlands. Chamber of Commerce (KVK) number: [KVK NUMBER]. Contact: [CONTACT EMAIL]. Solapsis decides why and how your personal data is used, so it is the "controller" under the GDPR.
2. The studio (the app at /app/)
The simulator runs entirely in your browser. The scenes you build, your settings, your autosave and the Python scripts you write stay on your device (in your browser's local storage) and are not sent to us, unless you save them to My Assets in your account (section 3). We do not use analytics, advertising or tracking cookies. Signing in is optional; if you sign in, we set one cookie that keeps you signed in (section 3), and none otherwise. Fonts, scripts and the simulation engine are served from this site, not from third parties. Clearing your browser data removes what the studio stored.
3. Your account (optional)
| What | Your email address; if you continue with Google, also your name and Google's ID for your account (Google tells us these and that the address is verified, nothing else); your plan; when the account was made and when you last signed in. For each browser you are signed in on: how you signed in, the browser's description (its "user agent"), and when the sign-in started and was last used. For each sign-in link you ask for: the address, the time, and a keyed hash of your IP address (not the address itself), to limit how many links can be requested. If you use My Assets in your account: the scenes and scripts you save there, with their names, folders, thumbnails and dates. |
|---|---|
| Why | To sign you in and keep your account, and to protect sign-in against abuse. |
| Legal basis | The agreement with you about your account (GDPR Article 6(1)(b)); protecting the service against abuse is our legitimate interest (Article 6(1)(f)). |
| Who sees it | Only the owner. The data is stored with Cloudflare, Inc. (hosting and database) and sign-in emails are sent through [EMAIL PROVIDER, e.g. Resend, Inc.]; both act as our processors and may process data outside the EU under the standard contractual clauses or the EU–US Data Privacy Framework. If you choose Google, Google's own privacy policy applies to your Google sign-in. We do not sell or share your data. |
| How long | Until you delete the account: Account → Delete Account in the studio deletes it at once, with everything stored with it, My Assets included; an item you delete in My Assets is deleted at once. A sign-in on a browser ends after 30 days without use, or when you sign out. Sign-in links are deleted a day after they expire (15 minutes after they are sent). |
| Cookie | One cookie, __Host-o2d_session, holding a random sign-in key; strictly necessary for being signed in, so it needs no consent. While you sign in with Google, a second cookie holds the sign-in's security values for at most 10 minutes. |
Account → Download My Data in the studio gives you everything stored about you as a file.
Share links. When you share a scene, a copy of it, its name and a picture of it are stored with Cloudflare and anyone who has the link can open and play it; we count how often it is opened. It is not listed anywhere or shown to search engines. Unshare it in the studio (Share → Unshare) to delete it at once; deleting your account ends all your links.
4. The waitlist form
| What | Your email address, your role, your answer about price, your description of the mechanisms you draw, the page you signed up from, the time, and the fact that you gave consent. |
|---|---|
| Why | To email you when Ordinate 2D is ready, and to learn what to build and what to charge. |
| Legal basis | Your consent (GDPR Article 6(1)(a)). You can withdraw it at any time; this does not affect what was done before. |
| Who sees it | Only the owner. The answers are stored with Cloudflare, Inc., our hosting provider, which acts as our processor and may process data outside the EU under the standard contractual clauses or the EU–US Data Privacy Framework. We do not sell or share your data. |
| How long | Until you withdraw your consent, and at the latest [24] months after you signed up. If you asked a question, until it is answered. |
The form also saves a copy of your answers in your own browser. That copy never leaves your device.
5. Server logs
Like any website, our host processes technical data (such as your IP address and the pages requested) to deliver the site and to protect it against abuse. We do not store this data ourselves or use it to identify you.
6. Your rights
You may ask us to show you your data, correct it, delete it, restrict its use, or give it to you in a portable format, and you may object to its use or withdraw your consent. Write to [CONTACT EMAIL]; we answer within one month. If you think we handle your data wrongly, you may complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or to the authority in your own country.
7. Changes
If this statement changes in a way that matters to you, we will say so on this page and, for waitlist members and account holders, by email.