Legal
Privacy Policy
Last updated September 10, 2026. Short version: the only thing you give us is an email address, only if you ask for beta access — plus cookieless, anonymous visit stats every page load sends automatically.
What this site collects
If you use the "Request beta access" form (on the home page, or the one in the hero), we collect the email address you type in, and — only if you choose to answer it — what you make, from a fixed list of options. Nothing else on this site asks you for anything.
What we do with it
We use your email address for exactly one purpose: to tell you when there is a build of Apelles worth installing. That is the one email the signup copy promises, and it is the only one you will get from us. We do not sell it, rent it, or share it with anyone for marketing. We do not build a mailing list beyond this one purpose.
Who actually receives it
The form posts directly to FormSubmit.co, a third-party form-processing service, which forwards the submission by email to the project owner's inbox. FormSubmit is the only third party your email address passes through — read FormSubmit's own privacy policy for how they handle it on their end before it reaches us. We do not use a mailing-list platform, a CRM, or any analytics tool to process it further.
Cookies and tracking
This site sets no cookies of its own, and runs one analytics script: Cloudflare Web Analytics, which the site's own infrastructure host enables automatically for any site it hosts. It is built specifically to avoid the things a cookie banner exists to gate: no cookies, no browser storage, and — per Cloudflare's own design for this product — no fingerprinting or persistent identifier used to recognise you across visits or other sites. What it does send, on every page load, is aggregate, anonymous traffic data (which pages get visited, roughly how fast they load, in what country and browser) that cannot be tied back to you individually. Read Cloudflare's own privacy policy for exactly what it collects and how. Because none of this identifies you or persists across visits, it doesn't trigger a cookie-consent requirement, so this page still has no cookie banner — a banner gating consent for tracking that isn't the identifying kind would be exactly the kind of decoration this site tries not to ship. This is the one thing that changed since this page was first written (found live, via a Lighthouse trace, not assumed); if the site's own behaviour changes again, this page changes with it, in the same commit.
One narrow exception, for transparency: a development-only tool used while building this
site (a position-tuning panel for the home page's hero image) writes a few numeric values
to your browser's own localStorage if you happen to load the site
while it is running in development mode. That tool is compiled out of the production build
entirely — it does not exist in the site you are reading this on.
How long we keep it
Until we send you the one email the signup promises, or until you ask us to delete your address sooner, whichever comes first. We do not have an automated deletion schedule beyond that; if you want your address removed at any time, contact us (below) and we will remove it.
Your choices
- Don't want to be contacted? Don't use the form. Nothing else on this site asks for anything.
- Want your address deleted? Email us and we will remove it.
- Want to know exactly what we hold? Ask — it is one email address and, optionally, one word describing what you make.
Contact
For anything on this page — a deletion request, a question about what we hold — email [email protected], the same inbox the beta signup form already delivers to.
Changes to this page
If what this site actually collects or does with it changes, this page changes in the same
commit — that is a standing rule for this whole codebase (see this repo's own
CLAUDE.md), not a promise made separately from the code.
This page is a good-faith, factually accurate description of what this site's own code does, written and checked against that code rather than assumed — it is not a substitute for legal advice, and has not been reviewed by a lawyer. Before relying on it for a real public launch, especially for visitors in the EU (GDPR) or California (CCPA), have it reviewed by one.