Privacy Policy

Naware ("we," "us," or "our") operates the website naware.io (the "Site"). This Privacy Policy explains what information we collect, how we use it, and your choices regarding that information.

By using the Site, you agree to the collection and use of information as described in this policy. If you don't agree, please don't use the Site.

1. Information We Collect

We collect two types of information: data you give us directly and data collected automatically when you visit the Site.

Information You Provide

When you interact with forms or features on the Site, you may voluntarily provide:

• Newsletter signups: Your email address.
• Investor waitlist signups: Your name, email address, and the source through which you found us.
• Game leaderboard submissions: Your name, email address, and game score.
• Comments: Your name and comment text. Comments are moderated before they appear publicly on the Site.
• Weed survey votes: The weed type you select, your U.S. state, and a visitor identifier (described below).

Information Collected Automatically

When you visit the Site, we automatically collect certain technical and usage data:

• Analytics data: Page views, scroll depth, section engagement (which parts of the page you interact with), time on page, and referring URL.
• Device information: Operating system, browser type and version, screen resolution, and browser language setting.
• UTM parameters: If you arrive via a link with tracking parameters (source, medium, campaign, term, content), we record those values to understand which channels bring visitors to the Site.
• Visitor identifier: We generate a visitor ID based on a lightweight browser fingerprint (a hash of your browser and device characteristics). This helps us count unique visitors and associate survey votes with a session. It is not linked to your real-world identity.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To operate and improve the Site: Analytics help us understand which content resonates, what devices our visitors use, and how to make the experience better.
• To communicate with you: If you sign up for our newsletter or investor waitlist, we'll send you updates about Naware's product, milestones, and investment opportunities. We won't spam you.
• To display community content: Survey results and moderated comments may be shown publicly on the Site.
• To understand our audience: UTM parameters and analytics help us measure the effectiveness of our marketing and outreach efforts.
• To maintain leaderboards: If you submit a score, your name and score may appear on the game leaderboard.

We do not sell, rent, or trade your personal information to third parties. Period.

3. Cookies and Local Storage

The Site uses the following browser storage mechanisms:

• localStorage: We store a visitor_id in your browser's local storage. This is a hashed identifier used to recognize return visitors and associate your survey votes across sessions. It persists until you clear your browser data.
• sessionStorage: We store temporary session preferences (such as UI state) that are automatically cleared when you close your browser tab.

We do not use traditional HTTP cookies set by our own servers. However, third-party services (see Section 4) may set their own cookies.

4. Third-Party Services

We use the following third-party services that may collect information about your visit:

• Meta Pixel (Facebook): We use the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The Meta Pixel may collect information about your browsing activity, device, and interactions with our Site, and it may use cookies. Meta's data practices are governed by Meta's Privacy Policy.
• Google Analytics 4: We use Google Analytics to understand Site traffic and usage patterns. Google Analytics may collect information about your device, browsing behavior, and approximate location (at the city or region level). Google's data practices are governed by Google's Privacy Policy.
• Cloudflare: Our Site is hosted on Cloudflare Pages, and our API backend runs on Cloudflare Workers. Cloudflare may collect technical data (such as IP addresses) as part of its security and performance services. See Cloudflare's Privacy Policy.

We do not control the data practices of these third parties. We encourage you to review their privacy policies directly.

5. Data Storage and Security

Your data is stored in a Cloudflare D1 database (a serverless SQLite database) hosted on Cloudflare's global infrastructure. All data transmission between your browser and our servers is encrypted via HTTPS/TLS.

We take reasonable measures to protect your information, but no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as it is necessary for the purposes described in this policy:

• Analytics data: Retained indefinitely in aggregate form to track long-term trends. Individual session records may be periodically purged.
• Email addresses (newsletter and waitlist): Retained until you unsubscribe or request deletion.
• Survey votes: Retained indefinitely as part of aggregate survey results.
• Comments: Retained indefinitely unless you request removal.
• Leaderboard entries: Retained indefinitely as part of the game experience.

If you'd like your data deleted, contact us at mark@naware.io and we'll take care of it within 30 days.

7. Your Rights

Depending on where you live, you may have certain rights regarding your personal information. We respect these rights regardless of your location.

For All Users

• Access: You can ask us what personal information we hold about you.
• Deletion: You can ask us to delete your personal information.
• Correction: You can ask us to correct inaccurate information.
• Opt out: You can unsubscribe from marketing emails at any time using the unsubscribe link in any email, or by contacting us directly.

California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect about you and how it is used.
• Request deletion of your personal information.
• Not be discriminated against for exercising your privacy rights.

We do not sell personal information as defined by the California Consumer Privacy Act (CCPA). We do not share personal information for cross-context behavioral advertising purposes.

European Economic Area and UK Residents (GDPR)

If you are in the EEA or UK, our legal bases for processing your data are:

• Consent: When you voluntarily provide your email or other information through our forms.
• Legitimate interests: For analytics and Site improvement, where our interest in understanding our audience does not override your privacy rights.

You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. To exercise any of these rights, email mark@naware.io.

8. Children's Privacy

The Site is not directed at children under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at mark@naware.io and we will promptly delete it.

9. Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. There is currently no industry standard for how websites should respond to DNT signals, so we do not alter our data collection practices in response to DNT signals. However, you can control cookies and tracking through your browser settings, ad-blocking tools, or by opting out of individual third-party services.

10. Links to Other Websites

The Site may contain links to third-party websites (such as Wefunder, LinkedIn, or social media platforms). We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policy of any site you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. If we make significant changes, we may also notify you via email or a notice on the Site.

Your continued use of the Site after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or just want to say hello, reach out: