Privacy

Enquiries

ONLI receives the name, email address, service selection, and brief you submit. Timing and budget are optional. We use these details to respond, consider scope, and agree whether to undertake work. Enquiry information is available through an owner-only inbox to ONLI’s principal; it is not added to public research reports.

A short outline is sufficient. Withhold sensitive documents and identifying information about other people until handling arrangements are agreed.

Retention

Uncommissioned enquiries, including unanswered and closed enquiries, expire 90 days after the last recorded correspondence. ONLI records later correspondence in its private inbox. Expired records are deleted from the active database in batches when the website next processes an API request; cleanup does not run continuously while the site is idle.

If an enquiry becomes a commission, an agreed retention date and terms must be recorded separately. The linked enquiry is retained until that date. Files or correspondence exchanged outside this website need their own agreed handling arrangements.

Deletion from the active database does not immediately erase hosting-provider backups or operational logs, which follow provider retention controls.

Access, correction, and deletion

Use the privacy-request form to ask about your enquiry information, request a correction, or request deletion. Include your enquiry reference if available and use the email address associated with the original enquiry. We may need to verify your access to that email before disclosing or deleting information. A submitted email address alone is not proof of identity.

Research and browser storage

Enquiries and recorded studies are separate. Cassandra and Obscura reports contain accepted recorded trials, including session timestamps, choices, impressions where recorded, and results. Recorded submissions are restricted to the ONLI owner. Do not place personal or client information in research notes intended for published records.

Cassandra and Obscura practice responses remain in the open page rather than the enquiry database. The public Labyrinth practice exercises keep answers in page memory only, until reload. The paid Threshold assessment is not available through public practice. Legacy standalone practice exercises save session records in this browser’s local storage when available. Closing or reloading a practice page clears its temporary state; clearing browser site data removes locally saved exercise records. Neither action deletes server-held enquiries or recorded studies.

Stillpoint optionally stores your chosen protocol, date, before-and-after focus ratings, and notes in this browser only. These reflections are not sent to ONLI. Use Clear local entries in Stillpoint or clear browser site data to remove them.

Private client area

The Threshold area uses your site-specific signed-in account identifier to check paid access. Verified payment references, amount, currency, status, and verification time are stored separately from public research. ONLI does not collect card details through the client area.

When access is active, the server stores assessment start and submission times, final responses, and the task-specific score. These records are private and used for the agreed assessment and debrief. Unsubmitted answer selections are not saved. Client-record retention and deletion arrangements must be agreed before paid enrollment opens; you may use the privacy-request form to ask about these records.

Hosting and access

The site uses OpenAI Sites hosting and Cloudflare infrastructure. ChatGPT sign-in supplies account identifiers and, where available, an email address to the site. Access checks restrict the enquiry inbox to the configured owner. Hosting, authentication, and infrastructure providers also process operational information under their own policies.

To limit automated submissions, the site stores an hourly hash derived from the connecting IP address or account identifier, with a submission count. Old hourly rate-limit entries are removed during request-driven cleanup.

OpenAI privacy policy ↗ · Cloudflare privacy policy ↗

Information handling

Make a privacy request.

Use the email associated with your original enquiry. Include its reference if available. Please do not send identity documents.