Legal

Privacy Policy

Last updated 5 September 2026. IMPRINT is operated by House of Namus. This page describes what we collect, why we collect it, who processes it on our behalf, and how to have it removed.

In short. IMPRINT measures how your thinking changes over time, so most of what we hold is what you wrote and the numbers derived from it. We do not sell data, we do not run advertising, and we do not use your writing to train anyone’s models. We do log visits to this site, including IP address and approximate city, as described in section 3.

1. What we collect from account holders

Everything below is created by you using the product, or derived directly from it.

Account details
Email address and password (handled by our authentication provider — we never see or store the password ourselves), plus the name, username, age group, profession, location and biography you choose to enter.
Baseline responses
The text, voice recordings or files you submit during the seven-step baseline capture, and the metrics computed from them: word count, average sentence length, vocabulary richness and time taken to compose.
Calibration and drift
Each recurring re-test, the resulting Drift Score, and the four contributing signals behind it.
Your own records
Journal entries, beliefs, time capsules, tracked skills and their practice history, and anything you upload to the gallery or write in the Forge.
The Mirror
Your messages, the questions returned, the session duration, and the count of dependency flags raised.
Community activity
Circles you create or join, check-ins, mentorship requests, and reviews — visible only to the people in those circles or to mentors you contact.

2. How we use it

To operate the product: to compute your Drift Score against your own baseline, to generate practice challenges, to run the Mirror, and to show you your own history. To keep the service working and secure — rate limiting, abuse prevention and diagnosing faults.

Your baseline is the measuring stick the product compares you against. It is read server-side precisely so that it cannot be altered by anything sent from your browser.

We do not sell personal data, we do not serve advertising, and we do not use your writing to train machine-learning models.

3. Visit logging

When you load a page on this site we record the visit and send it to the operator as an alert. This is first-party analytics; it is not shared with an advertising network. It covers:

Network
Your IP address, the approximate city and country it resolves to, your internet provider and network operator, and your time zone. Location is derived from the IP address and is accurate only to city level — we do not use your device's precise location, and we never ask for it.
Request
The pages you view, the page that referred you, your browser and operating system, and your screen and window size.
Behaviour
How long you stayed and how much of that was active, how far you scrolled, and the buttons and links you clicked. We record that an element was clicked and its visible label — not anything you type into a field.
Automated-traffic score
A score indicating whether the visit looks like a person or a crawler, so that bot traffic can be separated from real interest.
Account, if signed in
When you are signed in, the alert identifies the account — your name, email, how long ago it was created, whether onboarding is finished, and your current scores. It also notes when you sign in, create an account, finish onboarding, and which dashboard pages you opened. Signed out, the visit is not linked to any account.

This is retained only as messages in a private operator chat. It is not written to the product database and is not used to build a profile of you beyond what the product already holds.

How to switch this off. Visit imprint.houseofnamus.com/?notrack=1 once, or use the control below. Either way this browser stops being logged immediately — nothing is collected and nothing is sent — and it stays that way until you reverse it. No account is needed and you do not have to ask us.

This browser

Checking…

The same thing, as a link you can bookmark or share: imprint.houseofnamus.com/?notrack=1. To undo it, visit /?notrack=0. The choice is stored in this browser only, so it needs repeating on each browser and device, and clearing site data will reset it.

On “Do Not Track”. Some browsers can send a “Do Not Track” signal. We record that it was sent, but it does not by itself switch off logging, and we would rather say so than imply a protection we do not provide. The signal is off by default everywhere, is frequently switched on by extensions without the person knowing, and is ignored across most of the web — so it is a poor indication of what someone actually wants. The link above is our real opt-out: unambiguous, immediate, and reversible.

4. Who else processes it

We use a small number of providers to run the service:

Supabase
Database, authentication and file storage.
Vercel
Hosting and content delivery. Supplies the approximate location associated with your IP address.
OpenAI
Powers the Mirror only. Your messages in that feature are sent to OpenAI to generate the next question. No other part of the product sends your data to a model.
ipwho.is
Resolves an IP address to an approximate location and network operator for the visit logging described above.
Telegram
Delivers visit alerts to the operator.

5. How it is protected

Authorisation is enforced in the database rather than only in the application. Every table carries row-level security scoped to your own account, so one account cannot read another’s rows even if the application were to ask it to.

Uploaded files live in private storage and are served through short-lived signed links; every stored object path is bound to the account that owns it. Where other people can see something about you — the leaderboard, the mentor directory, a shared credential — it is read through a restricted view that exposes neither your email address nor your account state, and only if you have opted in.

6. Your choices and rights

You can edit your profile at any time, and choose individually whether your credential is public, whether you appear on the leaderboard, and whether you are listed as a mentor. All three are off unless you turn them on.

You can delete your account from Settings. Deletion is immediate and cascades: your profile, baseline, drift history, journal, beliefs, time capsules, vault, Mirror sessions and uploaded files are removed. It cannot be undone, and we do not keep a backup copy for you.

Depending on where you live you may also have the right to access a copy of your data, correct it, restrict or object to its processing, or complain to your local data protection authority. There is no self-service export yet; write to us and we will provide one.

7. How long we keep it

Account data is kept until you delete your account. Because the product measures change over time, the value of your record grows with its length — but that is a reason for you to keep it, not for us to retain it after you have asked us to stop.

Visit alerts are messages in a private chat and are deleted as the operator clears them; they are not retained on a schedule.

8. Children

IMPRINT is not directed at children under 13, and we do not knowingly collect their data. Onboarding asks for an age group so the product can adapt its prompts; if you believe a child has created an account, contact us and we will remove it.

9. Current status

IMPRINT is pre-launch. We are a two-person team and have not appointed a data protection officer. If our processors or practices change materially we will update this page and change the date at the top.

10. Contact

Write to defy@houseofnamus.com for anything on this page — access, correction, deletion, or to have your visits excluded from logging.

Back to IMPRINT