Skip to content

Privacy Policy

Last updated: March 16, 2026

Orellius ("we," "us," or "our") operates the website orellius.ai and related services. This policy explains what data we collect, why we collect it, and how you can control it.

We believe in minimal data collection. We do not run third-party analytics, we do not sell your data, and we do not serve ads.

1. Data We Collect

We collect only what is necessary to provide our services. Here is a complete list of the personal data we may process:

Newsletter subscription

When you subscribe to our newsletter, we collect your email address. This is sent to and stored by Buttondown, our newsletter provider.

GitHub authentication

When you sign in via GitHub (currently planned, not yet active), we receive your GitHub username, email address, and avatar URL through GitHub OAuth. This data is stored in our Supabase database to identify your account.

AI Library votes and interactions

If you vote on prompts, skills, or guides in the AI Library, we store your vote data linked to your account to prevent duplicate votes and display community rankings.

Hosting logs

Our hosting provider, Vercel, automatically collects standard server logs including IP addresses, browser user agents, and request URLs. These are used for security and debugging purposes and are subject to Vercel's privacy policy.

2. How We Use Your Data

We use personal data for the following purposes only:

  • ·Deliver newsletter emails you subscribed to
  • ·Authenticate your account and maintain your session
  • ·Record and display community votes in the AI Library
  • ·Debug issues and protect against abuse
  • ·Communicate important changes to our services or policies

We do not use your data for advertising, profiling, or automated decision-making. We do not sell or rent personal data to anyone.

3. Third-Party Services

We rely on a small number of third-party services to operate. Each processes data only as necessary for the service it provides:

ServicePurposeData Shared
VercelHosting and deploymentIP address, request logs
SupabaseDatabase and authenticationGitHub profile, votes
ButtondownNewsletter deliveryEmail address
GitHubOAuth authenticationProfile info (username, email, avatar)

We encourage you to review the privacy policies of these services. We do not control how they handle data beyond what is necessary for our integration.

4. Cookies and Local Storage

We use cookies and browser storage sparingly:

  • ·Authentication cookies: Supabase sets session cookies when you sign in. These are essential for keeping you logged in and cannot be disabled while using authenticated features.
  • ·Theme preference: We may store your display preferences (such as theme) in local storage so they persist between visits.
  • ·No tracking cookies: We do not use analytics cookies, advertising pixels, or any third-party tracking scripts.

5. Data Retention

We retain your data only as long as it serves its stated purpose:

  • ·Newsletter email: Retained until you unsubscribe. Buttondown removes your email from active lists upon unsubscription.
  • ·Account data: Retained until you delete your account or request deletion.
  • ·Vote data: Retained while your account is active. Deleted when your account is removed.
  • ·Server logs: Vercel retains access logs according to their own retention policy, typically for a limited period.

6. Your Rights

Regardless of where you are located, we respect your ability to control your personal data. You can:

  • ·Access your data: Request a copy of all personal data we hold about you.
  • ·Correct your data: Ask us to update or fix inaccurate information.
  • ·Delete your data: Request deletion of your account and all associated data. We will process deletion requests within 30 days.
  • ·Unsubscribe: Every newsletter email includes an unsubscribe link. One click, immediate effect.
  • ·Withdraw consent: If you previously consented to data processing, you can withdraw that consent at any time.

To exercise any of these rights, contact us using the methods listed below. We will respond within 30 days.

7. Children's Privacy

Orellius is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

8. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. If the changes are significant, we will notify newsletter subscribers via email.

We encourage you to review this page periodically to stay informed about how we handle your data.

9. Contact

If you have questions about this privacy policy or want to exercise your data rights, you can reach us through: