A simple privacy note for our founding-list site.

Your email address is the only required field. First name, student stage, field, goal, available time, the field you are asking for and anything you type in the free-text box are optional. We use them to decide which fields open first, and to tell you when your field opens.

Alongside that we store a few technical details. To stop automated sign-up abuse: a one-way cryptographic hash of your IP address (never the address itself, and it cannot be turned back into one), the two-letter country our network provider reports, your browser’s user-agent string, and a couple of anti-spam signals such as how long the form took to fill in. To learn which of our links bring people: which page you submitted from, or the link that brought you (for example our Instagram link). If you arrive through one of our links, the page keeps that marker in your browser’s session storage until you close the tab, so it can be saved with your sign-up. We count visits with a cookieless visit counter: it sets no cookies and never identifies you. There is no advertising pixel and no fingerprinting anywhere on this site, and we set no cookies of our own. Other third parties see your IP address: Google Fonts, which serves the typefaces on every page, the service that runs our visit counter, and Cloudflare Turnstile once you start filling in a sign-up form (see the next section).

Submitting the form does not add you to any mailing list. It creates a pending record on our own servers and emails you a single-use link that expires in 48 hours. Only when you click that link does your address reach Loops, the service we use to send founding-list emails. If you never click it, we never email you again. The pending record stays until we clear it; we have not set a fixed deletion window yet, and we will state one here before public launch. Separately, when a submission is refused as automated we keep only the shape of it: the email’s domain, never the address, plus the hashed IP and the country, so we can see what is attacking the form.

The sign-up form uses Cloudflare Turnstile to tell people from bots. Turnstile is used instead of a normal CAPTCHA precisely because it does not track you across sites or ask you to label photographs; Cloudflare’s privacy policy covers what it sees.

Polyment is built for learners from 13 upwards. The waitlist asks for nothing beyond an email address and what you want to learn: no date of birth, no school, no phone number. If you are a parent and would rather we did not keep your child’s address, write to us and we will delete it. Discord sets its own minimum age and its own rules, which we do not control.

If you join the Discord, Discord’s own privacy and account rules apply to your activity there.

Polyment is built by Infinitum FZ LLC. For privacy questions, or to have your waitlist data removed, reply to the confirmation email we sent you, or to any other email from us, or reach us in the Discord. Write from the address you signed up with and that is all we need to find the record and delete it. This note covers polyment.io, the founding-list site you are reading. The Polyment app at platform.polyment.io is a separate system that collects much more: your profile, your study history and your notes. A full privacy policy covering both will replace this note at public launch.