LEGAL

Privacy Policy

Effective date: October 21, 2026

This website is operated by Bitkaio Ltd. We respect your privacy and keep data collection to a minimum.

What We Collect

We only collect basic website usage statistics to understand performance and improve content. This may include:

  • Visited pages and time spent on pages
  • Referrer URL (the site you came from)
  • Browser type, device type, and operating system
  • Approximate country or region
  • Anonymized IP-derived technical data

How We Use Data

  • Monitor site stability and performance
  • Understand which pages are useful
  • Improve website content and user experience

What We Do Not Do

  • We do not sell personal data
  • We do not run behavioral advertising on this website
  • We do not knowingly collect sensitive personal data on this page

The Wäg Gateway Software

The Wäg gateway itself is self-hosted software that runs inside your own infrastructure. It does not phone home. Any prompts, completions, keys, logs, and telemetry it processes stay within your perimeter — we never receive them.

Cookies

We may use essential cookies and lightweight analytics technologies. If non-essential analytics cookies are used, they are only enabled based on applicable consent requirements. On the two form pages, Cloudflare's Turnstile script reads technical signals from your browser to protect the form against bots, as described under Forms You Submit below. We do not ask for consent for this check, because it is strictly necessary to provide the form you have asked to use and to protect it against abuse; Cloudflare likewise treats these signals as strictly necessary. We set no cookies for the check; any cookies Cloudflare itself uses are described in Cloudflare's cookie policy. If you prefer not to run the check, you can send us your enquiry by email instead.

The Orbit teaser video is hosted on YouTube. Nothing is requested from YouTube until you choose to watch it. When you do, the player loads from youtube-nocookie.com, and Google receives your IP address and technical details of your browser, and may store data in it, under its own privacy policy.

Data Sharing

We use a small number of infrastructure, analytics and email providers that process data on our behalf under contractual safeguards; those involved in handling form submissions, including the Turnstile bot check, are listed below. Apart from Cloudflare's own use of Turnstile signals described there, data is shared only as needed to operate and improve this website, to handle enquiries you send us, or to meet legal obligations. We do not sell personal data.

Your Rights

Depending on your location, you may have rights to request access, correction, deletion, or restriction of your personal data. You may also object to processing or withdraw consent where applicable.

Who Is Responsible

Bitkaio Ltd, a company registered in the United Kingdom, is the controller for data collected through this website. To exercise any of the rights described below, or to ask which providers we currently use, contact us at the address on our trust centre.

Forms You Submit

Two forms on this website send data to us: the design-partner application and the architecture-briefing request. When you submit either form, it is received by a server we operate and stored in the Wäg partner portal, our own system for managing partner and customer relationships. So that we can assess and reply to your enquiry, we process:

  • Which form you submitted, your name, work email address, organisation and role
  • The free-text answers you choose to give us, such as your current stack, the workload or problem you want to discuss, and what your current setup lacks
  • The language in which you were viewing the website, and the date and time of your submission
  • If you email us instead (see below), anything else you include in the message

How a submission is handled

  • The two form pages, and no other page of this website, load Cloudflare's Turnstile bot-protection script from challenges.cloudflare.com when the page opens. Turnstile reads technical signals from your browser — your IP address, the TLS fingerprint of your connection, your browser's User-Agent header and the identifier of this website — to tell people from automated scripts. The check is normally invisible; Cloudflare shows a short challenge only if it is unsure that you are human. Cloudflare states that it cannot directly identify individuals from these signals and that it does not use them to identify, profile or target anyone.
  • When you send the form, Turnstile gives your browser a one-time token. Our server passes that token, together with your IP address, to Cloudflare's verification service, which answers only pass or fail, with the hostname, the action and the time of the check. We store neither the token nor the result. A submission that does not pass the check is not forwarded and not stored.
  • Before a submission is accepted, our server also applies its own spam checks (a hidden field that only automated scripts fill in, and a minimum time between opening and sending the form) and limits the number of submissions per IP address. Your IP address is used only momentarily for that limit and for the Turnstile verification. We do not store it: the stored record contains no IP address and no tracking identifiers.
  • Accepted submissions are transmitted over an encrypted connection to the partner portal, which runs in Railway's EU West region in the European Union, and are stored in a Google Cloud database located in London, United Kingdom.
  • Our team is notified by email with your name, organisation and email address and a link to the submission; your free-text answers are not included in that email. Members of staff with a partner-management role review the submission in the partner portal. We do not send automatic replies; you will hear from a person.
  • If the bot check cannot run (for example because your browser blocks the script) or does not pass, or if our intake service is unavailable, the form instead offers to open a pre-filled message in your own email client. Mail you send us that way is received through our email provider and handled for the same purposes and the same periods described here.

Why we may process it

We process this data on the basis of our legitimate interests in answering enquiries that you initiate, in assessing design-partner applications, and in protecting our forms against abuse (Article 6(1)(f) of the UK GDPR and of the EU GDPR). The Turnstile bot check and our own spam checks rest on that interest in protecting our forms against abuse; we determine the purpose of the check, and Cloudflare performs it on our behalf. Where you yourself would be a party to the resulting agreement, we also rely on the need to take steps at your request before entering into a contract (Article 6(1)(b)). We do not use submissions for unrelated marketing, we do not add you to a mailing list without asking, and we do not sell or pass on your submission to third parties for their own purposes. You may object at any time to processing based on our legitimate interests.

How long we keep it

Submissions are deleted automatically 12 months after they were sent, unless a commercial or design-partner relationship begins in the meantime. Submissions we mark as spam are deleted after 30 days. If we accept a design-partner application, we create a partner-portal account for the applicant's email address and keep the application for the duration of the relationship and for as long as we are required to keep business records afterwards. The same periods apply to enquiries you send us by email. You can ask us to delete your submission at any time; see Your Rights above.

Who Processes This Data

We use a small number of providers that process data on our behalf under data-processing agreements, and only for the purposes described in this policy. Where a provider also uses data for a purpose of its own, we say so:

  • Cloudflare — hosting and delivery of this website, receipt of form submissions including spam checks and rate limiting, and the Turnstile bot check on the two form pages. For the bot check Cloudflare acts on our behalf. In addition, Cloudflare uses the signals that Turnstile reads from your browser, as an independent controller and on the basis of its own legitimate interests, to improve Turnstile's bot detection; it states no retention period for them. Cloudflare describes this in its Turnstile privacy addendum, and its cookie policy describes any cookies it uses.
  • Railway — hosting of the Wäg partner portal application that receives and stores form submissions (EU West region, European Union)
  • Google Cloud — the database in which submissions are stored (London, United Kingdom)
  • Our email provider — to notify our team of submissions, and to receive and reply to enquiries sent by email

Your submissions are stored in the United Kingdom and processed in the European Union. Cloudflare, Railway and Google are headquartered in the United States, and Cloudflare operates a worldwide network, so a submission, and the Turnstile bot check, pass through the Cloudflare data centre closest to you. Where personal data leaves the United Kingdom, the European Economic Area or Switzerland, we rely on an adequacy decision — including the UK's adequacy regulations for the EEA, and the adequacy decisions of the European Union and Switzerland for the United Kingdom — or on appropriate safeguards, such as the EU standard contractual clauses together with the UK International Data Transfer Addendum, in our agreements with these providers. We will provide details of these safeguards, and the name of our current email provider, on request.

Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with a new effective date.