What this site processes, and why.
Last updated 11 September 2026Beanome is a product of Oneirico. This notice covers the public website at beanome.com. The Beanome application at app.beanome.com is a separate service with its own terms, agreed with each pilot customer.
The short version: this site sets no cookies, loads no third-party fonts or trackers, and the only personal data it handles is what you type into the pilot-request form.
Who is responsible
The controller is Oneirico — [legal entity name], [registered address]. For anything in this notice, write to privacy@beanome.com.
What is processed
| What | Data | Purpose & legal basis | Kept |
|---|---|---|---|
| Pilot-request form | Name, business email, company, your message, phone and job title if you give them, plus the IP address and browser string of the submission | To reply to your request and set up a pilot — steps taken at your request before a contract (GDPR art. 6(1)(b)). IP and browser string are kept for abuse handling (art. 6(1)(f)). | Filed as a ticket in a private issue tracker (GitHub). Deleted when the request is closed, at the latest 12 months after the last contact. |
| Marketing emails (only if you tick the box) | Name, email, and whether you open or click our emails | To send you product news and measure whether it is read — with your consent (GDPR art. 6(1)(a)). The box is unticked by default and not required to send a request. Withdraw any time via the link in every email or by writing to us. | Until you withdraw; the consent record itself (what you agreed to, when) for as long as we email you. |
| Human check (Cloudflare Turnstile) | IP address, browser characteristics, a short-lived token | To tell a person from a bot before the form is accepted — strictly necessary for the service you asked for (no consent required). Processed by Cloudflare under our data-processing agreement. | Token minutes; Cloudflare's own logs per its policy. |
| Hosting (Cloudflare Pages) | IP address, requested URL, browser string, in server logs | To deliver the site and defend it against abuse (art. 6(1)(f)). | Cloudflare's standard log retention. |
| Traffic statistics (Cloudflare Web Analytics) | Page URL, referrer, browser and country, aggregated | To know which pages are read. Cookieless; no fingerprinting, no identifier is stored on your device, and nothing is shared with advertisers (art. 6(1)(f)). | Aggregated only. |
| Appearance preference | The value light or dark in your browser's local storage | To remember your choice of light or dark appearance. Stays in your browser; never sent to us. Strictly necessary for a setting you chose. | Until you clear site data or switch back to "system". |
What is not done
- No cookies are set by this site, so there is no cookie banner. If that changes, a consent dialog will ask first, and this notice will say what changed.
- No advertising, no social-media pixels, no cross-site tracking.
- Typefaces are served from this domain, not from Google Fonts.
- Nothing you type into the form is used to train a model or sent to a language-model provider.
Where the data goes
Cloudflare, Inc. hosts the site, runs the human check and the traffic statistics. GitHub, Inc. stores pilot requests as private issues. Both may process data in the United States; transfers rest on the EU–US Data Privacy Framework and the Standard Contractual Clauses in their agreements with us.
Your rights
Under the GDPR you may ask for access to, correction or deletion of your data, ask us to restrict or stop processing, receive a copy in a portable format, and object to processing based on legitimate interest. Write to privacy@beanome.com; we reply within a month. You may also complain to the supervisory authority in your country — ours is [authority].
Changes
When this notice changes, the date at the top changes with it. Material changes are announced on this page.