Privacy

01What we collect

Only what you type into the two forms on this site:

• The contact form — the topic you pick, your name if you give it, your email address and your message, plus the page you sent it from and the time.
• The newsletter form — your email address, where on the site you signed up, and the time.

Nothing else. The site runs no analytics and no trackers, and loads no third-party scripts or fonts.

02How it’s protected

Before anything leaves your browser, the form encrypts it with a public key derived from the Internet Computer’s threshold vetKeys (identity-based encryption). The topic, your name, your email address and your message are all inside the encryption.

Our backend canister stores only that ciphertext. The canister itself, the node operators who run it, and anyone reading its state see ciphertext and nothing more.

To read a message, a HYP Labs admin signs in with Internet Identity and obtains the decryption key, which is held in their browser’s memory only — never stored — and dropped when they sign out. Messages are decrypted there, in the admin’s browser.

03What encryption doesn’t hide

• That a submission happened, and when.
• Whether it was a message or a newsletter sign-up.
• Its approximate size. Submissions are padded to a size bucket before encryption, so the length gives away little — but not nothing.
• Your IP address, to the Internet Computer boundary node that relays your request — as with any website.

Removing someone’s admin access stops them fetching messages. It does not revoke a key they had already obtained.

04Cookies and storage

No tracking cookies. The canister that serves this site sets one cookie, ic_env, which carries only public canister ids and the network’s public key — nothing that identifies you.

If you switch the colour theme, your choice is kept in your browser’s local storage. It never leaves your device.

05Retention and deletion

Messages are kept until we’ve dealt with them, or until you ask us to delete them. Newsletter addresses are kept until you unsubscribe or ask us to remove them.

To ask for deletion, write to us through the contact form and tell us the email address you used.

06The newsletter

Addresses stay encrypted in the canister until we send an issue. Only then do we export the list to an email provider to deliver it, and every email carries an unsubscribe link.

07Contact

Questions about this notice go through the contact form. To report a security issue, choose Security disclosure as the topic.