Legal
Privacy notice
What airnox.app records when you read it and when you join the waitlist, and what happens to that information.
Draft, pending legal review.
In short
- Reading the site: Google Analytics counts visits and sets two cookies of its own. There is no advertising. The site's own cookie is set only if you pick a language.
- Joining the waitlist: your email address is stored encrypted; your country, operating system, browser, the page language and the time are stored with it in plain text.
- The address is used for release news only. The sign-up sends no email, not even a confirmation.
- To have your record deleted, write to feedback@airnox.app.
Who is responsible
The website airnox.app and its waitlist are run by CenSync. Questions about this notice and requests about your data go to feedback@airnox.app.
What the waitlist stores
When you submit the form, your browser sends three things to the sign-up service at airnox.app: your email address, the language of the page and a hidden field that stays empty when a person fills in the form (see “Automated sign-ups” below). The service checks that the address looks like an email address and stores one record:
| Field | What it holds |
|---|---|
| Email addressEncrypted | Your address, trimmed and in lower case |
| Address hashHash | SHA-256 of the same address, used to detect a second sign-up with it |
| CountryPlain text | Two-letter country code looked up from the IP address |
| Operating system and browserPlain text | Names only, such as “Windows” and “Chrome”, read from the user-agent header your browser sends. The header itself is not kept. |
| LanguagePlain text | The language version of the page you signed up on, such as “de” |
| TimePlain text | Date and time of the sign-up, in UTC |
The country comes from a copy of the GeoLite2 country database kept on the server itself; no other service is asked.
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
Why
- Email address: to send you release news about AirNox, and for nothing else.
- Address hash: so the same address cannot be added twice. If it is already on the list, the form says so. This also means that anyone who types your address into the form can learn that it is on the list.
- Country, operating system, browser and language: rough statistics about who signs up.
You give your consent by ticking the box on the form.
How it is protected
The email address is encrypted with AES-256-GCM before it is written to the database, a single SQLite file on the server. The key is not in that file: the service reads it from its configuration when it starts. Whoever runs the server holds the key and can decrypt the list; that is how release news can reach you.
The other fields are stored in plain text. The address hash is not encryption either: someone who has the database and guesses your address can confirm that it is on the list.
Email from us
The sign-up service sends no email at all, so there is no confirmation message; the text that replaces the form is the confirmation. The next email you get from us will be release news. It is sent by airnox.app itself, from an airnox.app address; the list is not handed to an outside email service.
Automated sign-ups
Two measures keep scripts off the list. The form has a hidden field that people do not see. When it arrives filled in, the service answers as if the sign-up had worked, stores nothing and writes the IP address to its log. Each IP address may also send at most five requests a minute; the counter for this lives in memory only and is dropped shortly after the minute has passed.
Logs
For every sign-up the service writes a short log line with the country, operating system, browser and language. It contains neither your email address nor your IP address. The line written when the hidden field arrives filled in is the exception: it contains the IP address (see “Automated sign-ups”). These logs stay on the server and are kept for no longer than 14 days.
How long
A record is kept for no longer than 14 days after you sign up, and is deleted sooner when you ask for it (see “Your choices” below).
Who else can see it
The sign-up service passes nothing to other services. The site and the sign-up service run on a server in the Netherlands, rented from DigitalOcean.
Reading the site
The pages use Google Analytics 4 to count visits and to see which pages are read. When a page opens, your browser loads Google's script from googletagmanager.com and sends Google the address of the page, the page you came from, your browser's language, your screen size, the user-agent header and your IP address, which Google uses to estimate your location. Google's own privacy policy applies to what it receives. The pages carry no advertising.
Everything else, the fonts, the images and the site's own script, comes from airnox.app itself. The links to X, LinkedIn, GitHub and Telegram are ordinary links: those services learn about your visit only if you follow one, and their own privacy policies apply there.
Like any web server, ours receives your IP address and the request for each page. It writes them to an access log: the IP address, the time, the address requested, the referring page and the user-agent header your browser sends. The access log stays on the server and is kept for no longer than 14 days.
The site sets one cookie of its own, and only when you pick a language in the language list:
| Name | ax_lang |
|---|---|
| Holds | The code of the language you picked, such as “de” |
| Lasts | One year, or until you delete it |
| Purpose | Remembers your choice, so that opening airnox.app takes you to that language |
Google Analytics sets two cookies on every visit:
| Cookie | What it holds | Lasts |
|---|---|---|
_ga | A random number that tells one browser from another | Two years |
_ga_4XSS2WGEXW | The state of the current visit | Two years |
Nothing else is stored in your browser. To keep Google Analytics out, block its cookies or googletagmanager.com in your browser, or install Google's opt-out add-on.
Your choices
You can ask for a copy of the record kept for your address, or have it deleted, by writing to feedback@airnox.app. Deleting the record is also how you withdraw your consent. We look up the record by your address, so write from that address or include it in your message.
Changes to this notice
When this notice changes, the new text replaces this page and the date at the top changes with it.
Join the waitlist
Leave your email and we will send release news. Nothing else.