Privacy Policy

Who we are

NeuroTendrils operates this website to share information about NeuroTendrils Suite (NeuroFlow, NeuroStudio, and NeuroLearn), research and education software for EEG and brain-computer interfaces, and related nonprofit outreach. This policy applies to neurotendrils.com and its subpages.

The organization controlling personal information collected through this website is NeuroTendrils, Riverside, California, United States. Contact: contact[at]neurotendrils[dot]com.

What we collect

We do not operate user accounts on this site, do not run advertising trackers in our application code, and do not operate a checkout or payment flow.

When you visit, our hosting provider Cloudflare processes standard request data needed to deliver and secure the site (for example IP address, browser user agent, requested URL, referrer, timestamp, and related request metadata). This site runs on a Cloudflare Worker. In our Cloudflare account, Workers Logs are enabled (currently sampling all requests) for operational observability; detailed Workers Traces are off, and we have not configured log export destinations. We do not attach Cloudflare KV, D1, R2, or similar storage bindings to store visitor profiles.

Cloudflare may also show aggregate traffic metrics in its dashboard. For how Cloudflare handles end-user data on customer sites, see Cloudflare’s privacy policy at https://www.cloudflare.com/privacypolicy/.

Your browser may store a site theme preference locally (localStorage key nt-theme) so light or dark mode can persist between visits. That preference stays on your device and is not sent to NeuroTendrils as an account or profile.

Email contact

This site does not host a contact form or server-side message inbox. “Email us” buttons typically scroll to the footer contact area. The footer email control opens your email client to contact[at]neurotendrils[dot]com (the address is assembled in the browser so it is not written as a plain mailto link in the page source). We do not receive or store form submissions on our servers. What you send is handled by your email provider under its own terms and privacy policy. If you email us, we use the content of your message to respond and for related nonprofit operations.

Cookies and similar technologies

We do not set marketing or advertising cookies from our application code. Cloudflare, as the host, may use cookies or similar technologies for security, performance, or bot management as part of providing its services. Those technologies are controlled by Cloudflare.

For more detail, see our Cookie Policy at /cookies.

How we use information

We use information to deliver and secure the website, prevent abuse, operate Cloudflare hosting logs and metrics, respond to emails you send, and meet legal obligations. We do not use site visit data to build advertising profiles or to sell products through this website.

Legal bases (GDPR / UK GDPR)

If you are in the European Economic Area, United Kingdom, or a similar jurisdiction, we process personal data where applicable on these bases: legitimate interests in operating a secure nonprofit informational website and responding to correspondence; and compliance with legal obligations when required. Where Cloudflare or another provider relies on consent for optional technologies, that provider’s notices apply.

Personal data may be processed in the United States and other countries where Cloudflare and our service providers operate. Cloudflare’s transfers and safeguards are described in Cloudflare’s privacy documentation.

California privacy rights (CCPA / CPRA)

If you are a California resident, you may have rights under the California Consumer Privacy Act as amended by the CPRA, including the right to know what personal information we collect, the right to delete personal information (subject to exceptions), the right to correct inaccurate personal information, and the right to non-discrimination for exercising your rights.

We do not sell personal information and we do not share personal information for cross-context behavioral advertising as those terms are defined under California law. Because this marketing site does not run ad trackers or a customer account system, most “sale” and “share” opt-out mechanisms are not applicable; if that changes, we will update this policy and provide required notices.

To exercise California rights, email contact[at]neurotendrils[dot]com with enough detail for us to verify and respond to your request. You may use an authorized agent as permitted by law.

Your privacy rights (general / GDPR)

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, and to lodge a complaint with a supervisory authority. Because we do not keep user accounts on this site, many requests relate to email you sent us or to logs held by Cloudflare. Contact contact[at]neurotendrils[dot]com and we will help as far as reasonably possible given how the site is hosted.

Children

This website is not directed to children under 13 (or under 16 where a higher age applies). We do not knowingly collect personal information from children through this site. If you believe a child has provided personal information to us by email, contact us and we will take appropriate steps.

Third-party links

This site links to external platforms such as Instagram, Discord, and GitHub. When you follow those links, the third party’s policies apply. We do not control how those services handle your data.

Retention

We do not store website form submissions on NeuroTendrils servers. Email you send is retained only as needed to respond and for ordinary nonprofit recordkeeping. Cloudflare retains Workers request logs and related metrics according to its own retention schedules for your plan.

No e-commerce on this site

neurotendrils.com does not currently sell goods or services, process payments, or store payment card data. If we introduce purchases later, we will update this policy and any required checkout notices before collecting payment information.

Changes

We may update this policy as our site, hosting configuration, or legal requirements change. The last updated date at the top of this page reflects the most recent revision.