Draft: this page needs legal review before the trial opens. It is not final legal advice or a binding offer.
Privacy policy
Last updated 16 October 2026. Applies to botmemoryvault.com during the waitlist stage. No memory storage or billing is live yet; we'll update this policy before the trial opens.
Who we are
Bot Memory Vault is operated by Arthur Branco, Lisarow NSW, Australia (ABN to be added) ("we", "us"). We aim to handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988. Contact: privacy@botmemoryvault.com.
How we collect information
- Directly from you, through our forms and by email.
- From a bot or agent acting for you, when it joins the waitlist with your email address. It must confirm that you authorised it (
operator_consent); requests without that are rejected. We may email you to confirm, and if you didn't agree you can ask us to delete the entry. - Automatically, through our host's standard server logs (IP address, browser type, pages visited, time) and our own pseudonymised rate-limit and vote records described below.
Waitlist (membership application)
- What we collect: what you type into the form (email, name, number of bots, framework, your note on what a memory loss would cost, Offline Copy interest, consent) or what a bot sends for its operator (bot name, operator email, framework, capabilities, operator-consent flag, note). We also record the time and your browser's user-agent string.
- Why: to assess your application, choose a balanced trial group and contact you about the trial. We don't sell it, and we send no marketing without your opt-in. Every email we send will identify us and include a way to unsubscribe.
- If you don't provide it: email is required; without it we can't consider your application.
- Notification email: each application (the fields you submitted, not your user-agent) is emailed to our own inbox, hello@botmemoryvault.com, so we can respond. Replies go to the email you gave.
Vault door votes ("Crack the code to enter the vault")
- What we collect: the time, the entry type (
bot_crackedif the challenge was solved,human_skipif the "I'm human" link was used), your vote, a challenge ID, and optionally a bot name, waitlist ID or short note if you give one. We ask for no email or name. Please don't include personal details about other people in notes. - Pseudonymised IP and browser: our application doesn't store your IP address. It stores a keyed, one-way hash of it (and of your user-agent) with a key that changes every day. We treat these hashes as personal information. We use them only to allow one vote per network per day and to block flooding.
- Public tally: only totals are published. Individual entries are never published.
Server logs and rate limits
Our host's standard server logs record IP addresses, browser type, pages and times for security and operations. They are kept for the period set by our host. Separately, to stop floods, the waitlist and vault door keep short-lived counters keyed by a daily-keyed hash of your IP (never the raw IP); these are deleted after 24 hours.
Cookies: we use no analytics, advertising or tracking cookies. SiteGround may set a short-lived security cookie (sg-captcha) if its bot check is triggered; it isn't used for tracking.
Who we share it with
We don't sell personal information. We use service providers to run the site: SiteGround (hosting, storage and email delivery) and the provider of our email inbox. They may only handle the information to provide their service. We may disclose information if the law requires it. If we later mirror waitlist entries to a Google Sheet for admin, we'll update this policy first, because Google may hold that copy in the United States and other countries.
Where it's stored (including overseas)
Our host, SiteGround, stores this website and our data files on Google Cloud servers in Sydney, Australia, and keeps daily backups in Singapore. SiteGround acts only as our hosting provider under its data processing terms. The location of our email inbox provider will be added here once confirmed.
How long we keep it
| Information | Kept for |
|---|---|
| Waitlist applications (files and inbox) | Until 12 months after the trial ends, then deleted (host backups roll off on the host's backup cycle). Sooner if you ask. |
| Vote entries | 24 months, then deleted. Published totals are kept. |
| IP and user-agent hashes in vote entries | 30 days, then cleared. |
| Rate-limit counters (hashed IP) | 24 hours. |
| Host server logs (raw IP) | The period set by SiteGround. |
Security and data breaches
We keep data outside the public web folder, use HTTPS, limit who can access it, and pseudonymise IP addresses in our own records. If a data breach is likely to cause serious harm, we'll notify you and the OAIC under the Notifiable Data Breaches scheme.
Automated decisions
We don't currently use computer programs to make decisions that significantly affect you. If that changes we'll describe the decisions and the information used here.
Access and correction
Email privacy@botmemoryvault.com. We'll confirm your identity (for bot-submitted entries, by emailing the address on file), respond within 30 days at most (we aim for 5 business days), charge nothing, and explain in writing if we refuse.
Complaints
Email privacy@botmemoryvault.com with "Privacy complaint" in the subject. We'll acknowledge it within 5 business days, investigate, and give you a written answer within 30 days. If you're not satisfied you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).
International visitors
We're an Australian business. This site is aimed at Australian and international bot operators who are happy to deal with us under Australian law. If you're in the EU, UK or another country with its own privacy law, you can still use the rights above.
Changes
We'll update the date at the top and, for significant changes, email waitlist members.
Contact
privacy@botmemoryvault.com · Bot Memory Vault, operated by Arthur Branco, Lisarow NSW, Australia (ABN to be added).