VORITH ← Back to vorith.io

Privacy Policy

01Who we are

Vorith ("Vorith", "we", "us") is a pre-launch decentralised physical infrastructure (DePIN) VPN project. Vorith is based in Australia and can be contacted at dev@vorith.io. Vorith is a worldwide product, and this website, vorith.io, is open to visitors from any country.

We manage personal information openly and transparently, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) (APP 1). We follow the Australian Privacy Principles whether or not the Privacy Act currently requires us to (for example, under the small business exemption). We use the APPs as our baseline everywhere. Where a visitor's local law gives extra rights, such as the EU or UK GDPR, the CCPA/CPRA or PIPEDA, we honour those rights too (see sections 11–13). This policy is free to read and is always available at vorith.io/privacy. If you need it in another format, contact us.

The Vorith VPN service itself has not launched yet. Before it launches, we will publish a separate privacy policy for the service that explains how VPN traffic and node data are handled. This policy covers this website and the waitlist only.

02Who can use this

The waitlist is for people aged 16 or over. Please don't sign up if you are under 16. If we learn that someone under 16 has signed up, we will delete their details. If you think this has happened, tell us at dev@vorith.io.

03What we collect and how

Data	Why	How we get it	How long we keep it
Email address	To send you waitlist and launch updates	You type it into the waitlist form	Until you unsubscribe or ask us to delete it, or until we close the waitlist or stop the project, whichever happens first. We then delete it.
IP address	To stop spam and abuse of the signup form, and to investigate security issues	Recorded automatically when you submit the form	90 days from signup, then deleted
Signup timestamp	A record of when and how you consented	Recorded automatically	As long as we keep your email address
Unsubscribe status	So we never email you again after you opt out	Set when you click "unsubscribe"	We keep a minimal suppression record (your email address and the date you opted out) for as long as needed to honour your opt-out

We do not collect your name, phone number, payment details, location, device fingerprint or any sensitive information. We do not use analytics, advertising tags, tracking pixels or cookies. The site does use your browser's own local storage for one key (vorith_waitlist_email) so the page can remember your signup; it stays on your device, is never sent to us, and you can clear it by clearing your site data. Like any web host, our hosting provider may keep standard server logs (such as IP address, time and page requested) for security and operational purposes. These logs are kept for a limited period under our host's standard settings (the access logs available to us cover up to the last 7 days). Our host also makes automatic backups of the website and database, which it keeps for up to 6 weeks.

You can browse vorith.io without giving us anything. However, the third-party services that deliver files for this site (OpenFreeMap, unpkg/Cloudflare and Google Fonts) receive your IP address when your browser loads those files; see section 06. Using a pseudonymous email address is fine.

04Collection notice (APP 5)

When you join the waitlist:

• Who is collecting: Vorith, contactable at dev@vorith.io.
• What and why: your email address, so we can send you Vorith updates, and your IP address and signup time, for security and as a record of your consent.
• Is it required? Only if you want to join the waitlist. If you don't give us an email address, we can't add you.
• Who we disclose it to: only the service providers in sections 06 and 07 (mainly our web host, Hostinger), and only to run the waitlist.
• Overseas: your data is stored on servers in Indonesia (see section 07).
• Your rights: this policy explains how to access or correct your data and how to complain.

05How we use and disclose it (APP 6)

We use your information only for the purposes we collected it for:

• sending waitlist confirmations, launch news and early-access invitations for Vorith
• honouring unsubscribe requests
• protecting the waitlist from spam, fraud and abuse
• meeting our legal obligations

We will not use or disclose it for any other purpose unless you consent, or unless the Privacy Act allows or requires it, for example where a law, court or tribunal order requires disclosure. We do not sell, rent or trade personal information, and we do not use it for third-party advertising. Every marketing email has an unsubscribe link, in line with the Spam Act 2003 (Cth).

If Vorith is ever restructured or transferred to a company, the waitlist may move with it. We will tell you before that happens, and we will require the new owner to handle your information in line with this policy.

06Third-party services on this site

Provider	What it does	What it receives
Hostinger International Ltd	Web hosting, the MySQL database and outgoing email (we send email with PHP mail() from our Hostinger server)	All waitlist data (stored on our behalf)
OpenFreeMap	Map tiles for the network map on the homepage	Your IP address and browser details, because your browser loads the tiles directly
unpkg (Cloudflare CDN)	Hosts the open-source map library (MapLibre GL)	Your IP address and browser details
Google Fonts	Website typefaces	Your IP address and browser details

OpenFreeMap, unpkg and Google Fonts never receive your email address or any waitlist data. They see only the technical details any browser sends when it loads a file, and they handle them under their own privacy policies. We may host these files ourselves in future to remove these requests.

07Overseas disclosure (APP 8)

vorith.io and its waitlist database are hosted by Hostinger in a data centre in Indonesia. Your information is therefore stored outside Australia. Hostinger International Ltd is a company based in Cyprus (EU) and may access data from other countries to provide support. Email we send may pass through the servers of your own email provider, wherever they are. The third-party file providers in section 06 run global networks.

Before disclosing personal information overseas, we take reasonable steps to make sure the recipient handles it consistently with the APPs. These include using a hosting provider that offers contractual data-protection terms and limiting what is shared to what is needed to run the service. Under the Privacy Act, Vorith remains accountable for how your information is handled overseas.

08Security and retention (APP 11)

• Data is sent over HTTPS (TLS encryption) and stored in a password-protected database that is not directly accessible from the internet.
• Access is limited to the Vorith team and to the hosting provider under its contract.
• Unsubscribe links are signed for each address, so they are designed not to work for anyone else's address.
• Retention: IP addresses are deleted automatically 90 days after signup. Email addresses are kept until you unsubscribe or ask us to delete them, or until we close the waitlist or stop the project, and are then deleted (apart from the minimal suppression record described above, which we keep only so we don't email you again). Deleted waitlist records are removed from the live database right away and drop out of our host's backups as those backups expire, within about 6 weeks.

No system on the internet is completely secure, and we can't guarantee security, but we take reasonable steps to protect your information from misuse, interference, loss and unauthorised access, change or disclosure.

09Access and correction (APP 12 & 13)

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Email dev@vorith.io from the address you signed up with. We may need to confirm that the address is yours before acting.

We will respond within a reasonable time and within the time required by law, free of charge. If we refuse a request, which the law allows only in limited cases, we will explain why in writing and tell you how to complain. If we don't agree to make a correction, you can ask us to attach a note to your record saying you believe it is wrong.

10Data breaches

We follow the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act. If we suspect a data breach, we will act quickly to contain it and assess it within the time required by law. If the breach is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner (OAIC) as soon as practicable.

For people in the EU or UK, we will also notify the relevant supervisory authority, and tell you if there is a high risk to you, where and within the time the GDPR requires. We will meet any notification duties in other places, such as US states and Canada, where they apply.

11EU and UK visitors (GDPR)

If you are in the European Economic Area (EEA) or the United Kingdom, the EU General Data Protection Regulation (GDPR) and the UK GDPR / Data Protection Act 2018 apply to our handling of your data.

Controller

The controller is Vorith, Australia, contactable at dev@vorith.io.

Lawful basis

Purpose	Lawful basis
Sending you waitlist and launch emails	Consent (Art. 6(1)(a)), which you give by submitting the form. You can withdraw it at any time with the unsubscribe link or by emailing us. Withdrawing doesn't affect anything done before.
Recording your IP address and signup time for abuse prevention and as evidence of consent	Legitimate interests (Art. 6(1)(f)): keeping the form secure and being able to show valid consent
Keeping a suppression record after you unsubscribe	Legal obligation and legitimate interests: making sure we never email you again

Your rights

You have the right to access your data, rectify it, erase it ("right to be forgotten"), restrict processing, object to processing based on legitimate interests, receive it in a portable format (portability) and withdraw consent at any time. We make no decisions about you by automated means, including profiling. To use any of these rights, email dev@vorith.io. We will reply within the time required by law, and we will tell you if we need longer for a complex request.

International transfers

Your data is transferred to Australia, where Vorith is run, and to Indonesia, where it is hosted. Neither country currently has an EU or UK adequacy decision. For the transfer to our host's servers in Indonesia, we rely on the European Commission's Standard Contractual Clauses (SCCs) (Module Two or Three) and, for UK data, the UK International Data Transfer Addendum, both incorporated in Hostinger's Data Processing Addendum. You can ask us for details of these safeguards.

Right to complain

You can complain to the data protection supervisory authority in the EU country where you live or work, or where you think an infringement happened. In the UK, that is the Information Commissioner's Office (ICO) (ico.org.uk). A list of EU authorities is at edpb.europa.eu. We'd appreciate the chance to sort out your concern first, so please contact us.

12US residents (CCPA/CPRA)

Vorith is pre-revenue and may not yet meet the thresholds of the California Consumer Privacy Act as amended by the CPRA, or of similar state laws. Even so, we follow these principles for all US visitors:

• We do not sell or share your personal information. We do not "sell" it, or "share" it for cross-context behavioural advertising, as those terms are defined in the CCPA/CPRA, and we have not done so in the past 12 months. We do not knowingly sell or share the data of anyone under 16.
• Categories collected in the past 12 months: identifiers (your email address and IP address) and records of your signup and unsubscribe status. The sources, purposes and retention periods are in section 03. We collect no sensitive personal information.
• Your rights: to know or access what we hold, to delete it, to correct it, and to opt out of sale or sharing (we do neither). We will not treat you differently for using any of these rights.
• To make a request, email dev@vorith.io. An authorised agent can also make one for you. We will verify the request using your email address and respond within the time required by law.

13Canadian residents (PIPEDA)

For people in Canada, we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL). We collect only what we need, with your consent, for the purposes described in this policy. You can withdraw consent, or ask to access or correct your information, by emailing us. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

14How to complain

1. Contact us first at dev@vorith.io with the subject "Privacy complaint". We will acknowledge it and aim to resolve it as quickly as we reasonably can.
2. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au/privacy/privacy-complaints, phone 1300 363 992, or GPO Box 5288, Sydney NSW 2001.
3. People outside Australia can also contact their local regulator, such as an EU supervisory authority, the UK ICO or the Privacy Commissioner of Canada (see sections 11–13).

15Changes to this policy

We may update this policy, for example when the Vorith service launches. The "last updated" date at the top will change. If a change is significant, we will try to email waitlist members before it takes effect.

16Contact us

This policy is written in plain language to help you understand how Vorith handles personal information. It does not limit any rights you have under the law where you live.