We're launching the full database soon!
Subscribe to get the latest updates. Our CEO also runs a weekly newsletter.
Privacy policy
Last updated: 06/10/2026
We collect as little personal data as we can. Our analytics are cookie-free and don’t identify you. The only personal data we actively collect is your email address, and only if you sign up for updates.
1. Who we are
The controller of your personal data is Fundacja Ornaq, Ogińskiego 11/9 , 03-318 Warsaw, Poland, entered in the National Court Register (KRS) under no. (“Ornaq”, “we”, “us”).
Contact for anything about your data: hello@ornaq.ai. We have not appointed a Data Protection Officer, because the law doesn’t require one for our activities.
2. What we collect and why
| What | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| Email address, when you sign up for Ornaq updates | To send you news about Ornaq: new data, publications, events | Your consent, art. 6(1)(a) | Until you unsubscribe. We then keep only the address on a suppression list so we don’t email you again. |
| Signup date, time, IP address and confirmation status | To prove you consented and to prevent abuse | Our legitimate interest in showing compliance, art. 6(1)(f) | As long as you are subscribed, plus up to [3] years |
| Whether you open our emails and click links in them | To see which content is useful | Our legitimate interest, art. 6(1)(f) | [24] months |
| Messages you send us by email | To reply and keep a record of the conversation | Our legitimate interest, art. 6(1)(f) | Up to [3] years after the conversation ends |
| Technical server logs: IP address, browser type, time of request | To run the website securely and stop attacks | Our legitimate interest, art. 6(1)(f) | Up to [30] days |
You don’t have to give us your email. If you don’t, you won’t receive our updates. Everything else on the site works without it.
3. Analytics without cookies
We use Simple Analytics, a privacy-first analytics service based in the Netherlands. It does not use cookies or similar technologies. It does not collect IP addresses or build profiles, and it cannot identify you. We only see aggregate figures, such as page views, referring websites, and country.
4. Cookies
We do not use cookies for analytics, advertising or tracking. Because of this, we don’t show a cookie banner. Technically necessary cookies may be set only if you log in to the site’s admin area, which visitors don’t do.
If we ever add a tool that stores information on your device for a non-essential purpose, we will ask for your consent first and update this policy.
5. Who processes your data for us
We use a small number of service providers. They process data only on our instructions, under data processing agreements.
| Provider | What they do | Location |
|---|---|---|
| Kit (kit.com) | Stores our subscriber list and sends our emails | USA |
| Raidboxes | Hosts the website and server logs | Germany (EU) |
| Simple Analytics B.V. | Cookie-free, anonymous website statistics | Netherlands (EU) |
We don’t sell your data or share it for marketing.
6. Transfers outside the EEA
Kit is based in the United States. Kit is certified under the EU–US Data Privacy Framework, and we rely on that certification for these transfers (art. 45 GDPR). As a backup, Kit’s data processing agreement includes the European Commission’s Standard Contractual Clauses (art. 46 GDPR).
7. Our personal Substack newsletter is separate
Ornaq’s founder also writes a personal newsletter on Substack. If you subscribe there, Substack and the author handle your data under Substack’s privacy policy. Signing up for Ornaq updates does not subscribe you to the Substack, and the reverse is also true.
8. Your rights
You have the right to:
- access your data and get a copy;
- correct it;
- have it deleted;
- restrict how we use it;
- object to processing based on our legitimate interest;
- receive your data in a portable format;
- withdraw your consent at any time. This does not affect processing that happened before you withdrew.
The simplest way to unsubscribe is the link at the bottom of every email. For anything else, write to hello@ornaq.ai. We’ll reply within one month.
You can also complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
9. No automated decisions
We don’t make automated decisions or profile you in ways that have legal or similarly significant effects.
10. Security
We use HTTPS throughout the site. We limit access to subscriber data to the people who need it and use providers with appropriate security measures.
11. Changes
If we change this policy, we will post the new version here with a new date. If the changes are significant, we’ll also tell subscribers by email.