Privacy Policy
This policy explains what personal data Emerald Exploration, Inc. ("Emerald Exploration", "we", "us") collects through emeraldexploration.com (the "Site") and our launch-update emails, why we collect it, who we share it with, and the rights you have. We collect as little as we can: for most people, that is only an email address.
1. Who we are
Emerald Exploration, Inc. is a Delaware corporation. We are the controller (in Brazilian law, the controlador) of the personal data described in this policy.
Emerald Exploration, Inc.
1000 Brickell Ave., Suite 715#5051
Miami, FL 33131, USA
Privacy contact: privacy@emeraldexploration.com
EU representative (GDPR Art. 27): [to be added once appointed]
UK representative (UK GDPR Art. 27): [to be added once appointed]
2. What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Your email address | You, when you sign up | To send the confirmation email and, once you confirm, launch updates |
| Signup and consent record: when you signed up and confirmed, and which version of the signup notice you saw | Generated when you sign up and confirm | To show that you asked for our emails, and to honour unsubscribes |
| Approximate country (for example "DE") | Derived by Cloudflare from your IP address at signup. We do not store the IP address itself. | To apply the right privacy rules for your location |
| Bot-check signals | Cloudflare Turnstile processes technical browser signals when you submit the form | To stop automated and abusive signups |
| Technical and security data (IP address, browser type, requested pages) | Processed by Cloudflare when your browser loads the Site | To deliver the Site securely and protect it from attacks |
| Aggregate visit statistics | Cloudflare Web Analytics, which does not use cookies or track you across sites | To understand how many people visit |
| Email engagement (whether an email was delivered, opened or a link clicked) | Our email provider, Resend | To keep our list healthy and measure whether updates are useful |
| Anything you include when you email us | You | To reply to you |
We do not collect sensitive or special-category data through the Site, we do not buy data about you, and we do not use your data for advertising.
The Site does not use advertising or tracking cookies. On phones, the Site can read your device's motion sensors so the emerald's light follows the tilt of your phone. This happens only in your browser; motion data is never sent to us.
3. How we use it, and our legal bases
- Sending launch updates: based on your consent (GDPR / UK GDPR Art. 6(1)(a); express consent under Canada's CASL). We use double opt-in: we only add you to the list after you click the link in the confirmation email.
- Keeping consent and unsubscribe records: to meet our legal obligations (Art. 6(1)(c)) under anti-spam and privacy laws.
- Security, fraud and abuse prevention: our legitimate interests (Art. 6(1)(f)) in keeping the Site and our list safe. These interests do not override your rights because the data involved is minimal and short-lived.
- Replying when you contact us: our legitimate interest in responding to you, or steps you ask us to take.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
4. Who we share it with
We do not sell your personal data, and we do not "share" it for cross-context behavioural advertising (as those terms are used in California law). We disclose it only to service providers (processors) that work for us under contracts requiring them to protect it and use it only on our instructions:
- Cloudflare, Inc. (USA): website hosting, database, bot protection (Turnstile), security and cookieless analytics.
- Resend (Plus Five Five, Inc., USA): email delivery and our mailing list.
- Google LLC (Google Workspace, USA): our company email, if you write to us.
We may also disclose data if the law requires it, to protect our rights or someone's safety, or to a successor if Emerald Exploration is involved in a merger, acquisition or sale of assets. In that last case, this policy will continue to apply to your data.
5. International transfers
We are based in the United States, and our providers process data in the United States and other countries. When we transfer personal data from the EEA, UK or Switzerland, we rely on the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses (with the UK Addendum). You can ask us for a copy of the safeguards we use.
6. How long we keep it
- Unconfirmed signups: deleted automatically after 7 days.
- Confirmed subscribers: kept until you unsubscribe or ask us to delete your data.
- After you unsubscribe: we delete your entry from our database within 30 days. Our email provider keeps your address on a suppression list marked "unsubscribed", so you are never emailed by mistake. Ask us if you want that removed too.
- Security logs: kept by Cloudflare for short periods under its own retention schedule.
- Emails you send us: kept as long as needed to deal with your request, and no longer than 3 years.
7. Your rights
Wherever you live, you can ask us to tell you what data we hold about you, give you a copy, correct it or delete it, and you can unsubscribe at any time using the link in any email. Depending on where you live, you may have additional rights:
European Economic Area, United Kingdom and Switzerland
You have the right to access, rectify and erase your data; restrict or object to processing; data portability; and to withdraw consent at any time (this does not affect processing that already took place). You can also complain to your local data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk).
California and other U.S. states
Residents of California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia and other states with privacy laws have the right to know what we collect and disclose, and to access, correct and delete it. You also have rights to opt out of the sale or sharing of personal data, targeted advertising and profiling. We do none of these, so there is nothing to opt out of; we honour Global Privacy Control signals regardless. We will not discriminate against you for using your rights. You can use an authorized agent; we may ask the agent for proof that you authorised them. If we decline your request, you can appeal by replying to our decision. If the appeal is denied, you can contact your state attorney general.
In the last 12 months we collected these categories of personal information: identifiers (email address), internet or network activity (security and bot-check data) and approximate geolocation (country). We collected them from you and your device for the purposes in section 3, and disclosed them only to the service providers in section 4.
Canada
You can access and correct your data and withdraw consent under PIPEDA and provincial laws. You can complain to the Office of the Privacy Commissioner of Canada.
Brazil
Under the LGPD you have the rights in Art. 18, including confirmation of processing, access, correction, anonymisation or deletion, portability, information about sharing, and withdrawal of consent. You can complain to the ANPD.
Australia, Japan, Singapore, South Korea, India and elsewhere
You can access and correct your data and complain to us or to your local privacy regulator, for example the OAIC in Australia.
How to make a request
Email privacy@emeraldexploration.com from the address you signed up with, or tell us which address it is. To protect you, we may confirm the request by emailing that address. We respond within one month (45 days for U.S. state-law requests). If we need longer, we will tell you why.
8. Children
The Site and our emails are not directed to children, and we do not knowingly collect data from anyone under 16. If you think a child has signed up, contact us and we will delete the data.
9. Security
We use HTTPS everywhere, encryption at rest, strict access controls, and short-lived, hashed confirmation tokens. We do not store raw IP addresses in our database. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.
10. Changes to this policy
If we change this policy, we will update the date at the top. If a change is significant, we will email subscribers before it takes effect.
11. Contact
Questions or requests: privacy@emeraldexploration.com, or by post to Emerald Exploration, Inc., 1000 Brickell Ave., Suite 715#5051, Miami, FL 33131, USA.