The short version
Oscylo’s website provides public community analytics with optional beta-access, community-coverage, and feedback forms. It does not process payments or run behavioral advertising. Oscylo does not sell personal information.
Oscylo measures how its own website is used — which pages are read, what gets clicked, how far people scroll — in order to improve it. That measurement uses a daily visitor identifier and a temporary identifier for activity within a browser tab. It does not use advertising cookies. You can switch off website analytics. Details are in Analytics below.
Information handled when you visit
Like most websites, our hosting, content-delivery, and security providers may process technical information needed to deliver and protect the site. This can include your IP address, browser and device type, requested pages, timestamps, referring page, approximate region, and diagnostic or security events.
These providers may use strictly necessary technologies, including cookies when required for security, traffic management, or abuse prevention. Oscylo has not added advertising cookies or cross-site tracking on this website.
Information you choose to provide
If you request beta access, we collect your email address, any optional use-case note, the page where you signed up, the version of the consent language you accepted, signup status, and creation/update timestamps. We use this information to review and manage access requests, contact you about access, send closely related product updates you requested, prevent duplicate records, and maintain appropriate business records.
A community-coverage request can include a community name, an optional explanation, and an optional email address if you want a reply. Product feedback can be submitted without an email address; if you provide one and ask for follow-up, we use it to respond. Coverage, feedback, and beta records are stored in a private Cloudflare D1 database, and the site has no public endpoint for reading them. To reduce automated abuse, the form temporarily stores a one-way keyed representation derived from the requesting IP address, together with an hourly attempt count. It is not used for advertising or user profiling and is deleted after its short rate-limiting window.
Public submission forms use Cloudflare Turnstile to distinguish legitimate requests from automated abuse. The browser receives a short-lived verification token, and Oscylo sends that token and, when available, the requesting IP address to Cloudflare's Siteverify service. The token is used only to approve or reject the form submission; Oscylo does not store the Turnstile token in its submission databases.
If you contact Oscylo by email, we receive the information you include, such as your email address, name, message, and any attachments. We use it to respond, maintain the relationship you requested, prevent abuse, and keep appropriate business records.
Analytics
Oscylo measures its own website traffic so it can tell which pages are useful, which are ignored, and how much of its traffic is automated. Our first-party analytics does not set identification cookies. Oscylo does not track visitors across other websites, does not build advertising profiles, and does not sell or share this information.
The single exception is the optional opt-out cookie described under Your choices, which is set only if you ask for it and exists solely to stop measurement.
How visitors are counted
Oscylo derives a pseudonymous visitor identifier from the IP address, browser information, and hostname. That identifier changes daily. A separate temporary browser-session identifier groups activity within a tab and may span more than one day. These identifiers reduce the use of directly identifying information; they do not guarantee anonymity. Raw IP addresses are not stored in Oscylo’s analytics tables.
What is recorded
Oscylo records, in association with these identifiers:
- pages requested, timestamps, and HTTP response status;
- the hostname of the referring site, never the full referring URL, so search terms and identifiers carried in a referring link are not stored;
- approximate country and region supplied by Cloudflare's network, plus network operator and autonomous-system number — no city, street, or coordinates;
- browser and device category, and whether the client is a known crawler;
- campaign parameters when a link carries them (
utm_sourceand similar); - on-page activity: which links and buttons were clicked, the position of a click as a percentage of the page, how far down a page was scrolled, how long a section of the page was visible, whether a form was started and whether it was submitted, and time engaged while the tab was in the foreground.
Oscylo does not record the contents of anything you type, does not capture or replay your screen, does not record mouse movement, and does not read your clipboard, files, or other browser tabs. Form measurement records only that a field was focused and that a form was submitted — never what was entered into it.
Your choices
To switch off website analytics, load any Oscylo page with ?__analytics=off added to the address — for example oscylo.com/?__analytics=off. From that point, Oscylo’s first-party analytics and its Cloudflare Web Analytics script are disabled for this browser. Hosting and security providers may still process operational records. To resume, use oscylo.com/?__analytics=on.
This analytics preference cookie is set only if you ask for it here. It contains nothing but the fact that you opted out, is never set for anyone who has not requested it, is not used to recognise or count you, and lasts two years so the choice does not quietly lapse. Clearing your cookies clears it too, which will restart measurement — so if you clear cookies routinely, opt out again afterwards.
The on-page measurement script separately honors the Global Privacy Control signal: if your browser or extension sends it, the script stops and records nothing. Because the script is served from oscylo.com rather than a third party, blocking it with a content blocker also works, and nothing on the site depends on it. Note that the GPC signal and a content blocker both stop the on-page script only; server-side request analytics records continue. The opt-out above stops both first-party analytics channels. Hosting and security processing is separate.
Retention
On the adult comparison page, interaction events use generic control labels, without community names, link destinations, or search text. Private editing activity is excluded from website analytics.
Individual analytics records are deleted after 90 days. Aggregate daily totals — counts per page, per country, per referring site — contain no visitor identifier and are retained indefinitely.
Cloudflare Web Analytics
Oscylo also uses Cloudflare Web Analytics for page performance and Core Web Vitals measurement. It is cookieless, is not used by Oscylo for behavioral advertising or cross-site tracking, and Cloudflare states that Web Analytics does not collect or use visitors’ personal data.
Public community information
The public tracker and charts use aggregate community-level figures. They do not publish usernames, post text, comment text, or personal profiles. Figures are dated historical aggregates and are not claims of real-time platform reporting. Oscylo also summarizes company-level metrics from public SEC filings and investor materials.
How information is used and disclosed
We use information only as reasonably needed to:
- deliver, maintain, secure, and improve the website;
- understand reliability and diagnose technical problems;
- respond to messages and requests;
- prevent fraud, abuse, and security incidents; and
- comply with law and protect legal rights.
Information may be handled by service providers supporting hosting, security, domain services, and email. It may also be disclosed when required by law, to protect rights or safety, or as part of a business reorganization. Oscylo does not sell personal information or share it for cross-context behavioral advertising.
Retention and security
Beta emails are retained while the beta program is active, while you remain interested in access or updates, or as reasonably needed for legal obligations and dispute resolution. You may ask us to delete your beta record at any time. Coverage and feedback submissions are retained as reasonably needed to review the request, respond when asked, improve the product, prevent abuse, and meet legal obligations. You may request deletion of a submission tied to your email address. Pseudonymous form-rate records are designed to expire after approximately 24 hours. Individual website-analytics records are deleted after 90 days; the aggregate daily totals that remain contain no visitor identifier. Infrastructure providers apply their own necessary retention schedules.
Oscylo uses data minimization, encrypted transport, private database access, same-origin form checks, input validation, rate limiting, and provider security controls, and server-side Turnstile validation. No internet service can promise absolute security.
Your choices and rights
Depending on where you live, you may have rights to request access, correction, or deletion of personal information, or to object to or restrict certain processing. Because Oscylo does not currently sell personal information or use it for targeted advertising, there is no sale or targeted-advertising opt-out mechanism on this site.
To make a privacy request, email privacy@oscylo.com. We may need to verify a request before acting on it.
Children
This site and its forms are intended for adults and are not directed to anyone under 18. Oscylo does not knowingly collect personal information from anyone under 18. If you believe someone under 18 has submitted personal information, contact us and we will take reasonable steps to delete it.
Changes and contact
This policy may change as the product develops. Material changes will be reflected by an updated effective date. Questions can be sent to privacy@oscylo.com.