PRIVACY PROTOCOL [v1.0]

Last Updated: March 27, 2026

1. Data Collection

We only collect what is strictly necessary to run the Resistance:

• Identification: Your email address, provided voluntarily for the waitlist.
• Security: Device and browser metadata processed via Firebase App Check to prevent bot-flooding.
• Communication: Timestamps and source tags for waitlist attribution.

2. Service Providers

We use Google Firebase (Infrastructure) and Cloud Firestore(Database). Your data is stored on Google's secure servers. We do not sell, rent, or trade your data to third-party slop-merchants.

3. AI & Automated Decision Making (ADMT)

Sauver is an AI-driven tool. While the landing page only collects emails, the Sauver Engine (when deployed) uses LLMs to analyze email headers and content for slop classification.

We honor Global Privacy Control (GPC)signals and comply with California's 2026 ADMT transparency requirements. We do not sell your data, and we do not use it to train third-party models.

4. Analytics

We use Firebase Analytics to understand aggregate usage patterns (page views, feature adoption). No personally identifiable information is shared with advertisers. You can block analytics by enabling your browser's Do Not Track or GPC signal.

5. Data Retention

Waitlist emails are retained until the product launches or you request removal. Security metadata processed by App Check is ephemeral and not stored.

6. Your Rights

You can request to be removed from the waitlist, access your stored data, or ask us to delete everything at any time by contacting legal@sauver.org.

If you are a California resident, you have additional rights under CCPA/CPRA including the right to know, delete, correct, and opt-out of the sale or sharing of personal information. We do not sell or share your personal information.