Legal

Privacy Policy

Last updated:

The Non-AI Project is committed to transparency — and that extends to how we handle your data. This policy explains what we collect, why, and what choices you have. We keep it plain because you deserve to understand it without a law degree.

1. Who we are

The Non-AI Project operates this website at nonaiprojects.org. For privacy enquiries, contact us at team@nonaiprojects.org.

2. What information we collect

Analytics data (automatic)

We use Google Analytics 4 (GA4) to understand how visitors use this site. When you visit, Google Analytics automatically collects:

  • Pages visited and time spent on each page
  • Referring website or search engine
  • Approximate geographic location (country/city, derived from IP address)
  • Browser type, operating system, and device type
  • Clicks and navigation patterns

Your IP address is sent to Google but is anonymized before storage. This data is processed by Google LLC under their own privacy policy. We do not have access to your raw IP address.

Certification application form

When you apply to have your project verified, we collect the information you enter into the application form:

  • Project name, category, URL, and source repository URL
  • Project description
  • Your name, email address, and country
  • Number of contributors and tools used

This data is submitted to Formspree (a third-party form processing service) and forwarded to our auditor team by email. We retain application data for the duration of the review process and, if certified, for the term of your certification.

Testimonial form

If you choose to share your story via the "Share your story" form, we collect your name, role, and the quote you write. Submitted testimonials are reviewed by our team before being published on the site. This data is also submitted through Formspree.

3. How we use your information

Data Purpose Legal basis (GDPR)
Analytics data Understand site usage, improve content and performance Legitimate interest / consent where required
Application form data Process your certification application and conduct the audit Performance of a contract / legitimate interest
Email address Communicate with you about your application status Performance of a contract
Testimonial content Display approved quotes on the website Consent (you submitted it voluntarily for publication)

We do not sell your data. We do not use your data for advertising. We do not send marketing emails.

4. Third-party services

Google Analytics

Google Analytics is operated by Google LLC. Data collected through GA4 may be transferred to and stored on servers in the United States. Google acts as a data processor on our behalf. You can opt out of Google Analytics across all websites using the Google Analytics Opt-out Browser Add-on.

Formspree

Form submissions are processed by Formspree, Inc. Formspree receives the data you enter into our forms and forwards it to us by email. Formspree's own privacy policy governs their handling of your data. We do not store form submissions in a database we control — they arrive as emails to our team.

Firebase Hosting

This website is hosted on Firebase Hosting, a service provided by Google LLC. Firebase may log standard server request data (IP addresses, request paths, timestamps) for operational purposes.

5. Cookies

We use cookies solely through Google Analytics. These are analytics cookies used to distinguish visitors and track sessions. No cookies are set by this site itself for functional or tracking purposes beyond GA4.

You can control or delete cookies through your browser settings. Disabling analytics cookies will not affect the functionality of this website.

6. Data retention

  • Analytics data — retained for 14 months in Google Analytics, after which it is automatically deleted.
  • Application data — retained for the duration of the certification relationship, plus up to 2 years after a certification expires or is revoked, to maintain audit records.
  • Declined applications — contact details and project data are deleted within 90 days of a declined application.
  • Published testimonials — retained until you request removal.

7. Your rights

Depending on where you live, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Correction — ask us to correct inaccurate data.
  • Deletion — ask us to delete your data, subject to our legal obligations and legitimate interests (e.g. maintaining audit records for certified projects).
  • Objection — object to processing based on legitimate interest.
  • Portability — receive your data in a portable format.
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at team@nonaiprojects.org. We will respond within 30 days. EU/EEA residents may also lodge a complaint with their local data protection authority.

8. Children's privacy

This website is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data through our forms, contact us and we will delete it promptly.

9. Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the site after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy or your data? Reach us at team@nonaiprojects.org. We are a small team and aim to respond within a few business days.