# Noemire — Privacy Policy

**Version:** 2026-08-16
**Controller:** Noemire (Egypt)

> These terms are a good-faith engineering draft prepared alongside the v1
> implementation. They have **not** been reviewed by a qualified lawyer and
> must be before Noemire is made available to the public. A real controller
> identity and contact address must be inserted before launch.

---

## 1. What We Collect

**Account data** — email address, display name, and a password stored only as
a salted scrypt hash. We never store your password.

**Content you create** — the title and body of every idea you write, and every
comment you post.

**Transaction history** — your VaultCoin balance, the ideas you have acquired
and released, the prices at which each transfer occurred, and an append-only
ledger of every balance change.

**Consent records** — the timestamp and version of the Terms of Service you
accepted at signup.

**Technical data** — server logs necessary to operate and secure the service.

We do **not** collect payment details, because nothing on Noemire can be
paid for. We do not sell personal data, and we do not use your data for
advertising.

## 2. Lawful Basis

- **Performance of a contract** — operating your account and the trading
  mechanics you asked to use.
- **Consent** — accepting the Terms at signup.
- **Legitimate interests** — security, abuse prevention, and keeping an
  auditable record of transfers so ownership disputes can be resolved.
- **Legal obligation** — responding to lawful requests and removal
  obligations.

## 3. Who Can See What

Your **display name** is public alongside every idea you publish.

The **body of an idea and its comment thread** are visible only to the user
who currently owns access to that idea. Non-owners see the title, the author's
display name, the current price, and a short teaser excerpt of up to 140
characters.

**Your balance and portfolio are private to you.**

## 4. Retention

Account and content data are retained while your account exists.

Transaction and ledger records are retained after account deletion in
anonymised form, because they are the audit trail proving that VaultCoin was
conserved and that ownership transfers were legitimate.

## 5. Your Rights

Subject to Egyptian data-protection law, you may request access to your
personal data, correction of inaccurate data, deletion of your account,
a copy of your data in a portable format, and restriction of or objection to
certain processing.

## 6. Account Deletion — Read This Carefully

Deleting your account **anonymises** it. Your email address, display name, and
credentials are severed from your records, and you can no longer log in.

**The ideas and comments you authored are not deleted.** Their text remains on
the platform and remains visible to the users who currently own access to
them. Those users acquired that access under the Terms, and removing the
content would deprive them of something they legitimately hold.

After deletion, your authored content is attributed to an anonymous placeholder
rather than to you.

If you need specific content removed — for example because it is unlawful,
infringing, or was published in error — that is a **content removal request**,
handled separately under section 10 of the Terms of Service. Deleting your
account alone will not remove it.

We consider this the most significant privacy trade-off in the product, which
is why it is stated here plainly rather than buried.

## 7. Security

Passwords are hashed with scrypt and a per-user salt. Sessions use signed
tokens. Access to idea bodies and comments is enforced server-side at the
database query level, not merely hidden in the interface.

## 8. Children

Noemire is not intended for anyone under 16. We do not knowingly collect
data from children. If we learn that we have, we will delete the account.

## 9. Changes

We may update this policy. Material changes will be notified in-platform and
the version identifier above will change.

## 10. Contact

Insert a monitored contact address before launch. Requests under section 5
should be directed there.