Privacy

Data minimization

We collect only what the service needs to function: account identity, the memories you write, and the operational metadata required to serve and protect the product. Nothing more.

What we collect

• Account identity (email, OAuth subject, hashed password)
• Memories and structured entities you (or your clients) write
• Operational logs (timestamps, request metadata) for security and integrity

What we don't collect

• Behavioral advertising identifiers
• Third-party analytics cookies that track you off-site
• Anything from services OmegaVault does not integrate with

Operational metrics

We run first-party analytics on *.omegavault.app to count visits and see which pages hold attention. It is enabled only after you accept it in the cookie banner. The visitor (ov_vid), session (ov_sid), and attribution (ov_attr) cookies it uses, and their retention windows (up to 400 days for sessions, 180 days for raw page events and the attribution and consent cookies), are listed in the Cookie Policy. No IP address and no full browser user-agent string is retained — the country and a coarse device category are resolved once at collection and the originals are discarded. Declining keeps only an anonymous page count with no visitor id.

Your controls

Export, delete, and revoke access are all self-serve — see Export, Delete, and Connected apps.

Where to read the fine print

The full, formal document is the Privacy Policy.