# Privacy policy

Last updated 9 November 2026 (who runs the site, corrected).

This policy covers two things: this website, dory.systems, and the waitlist you can join on it. A short section at the end describes how the Dory app handles data, with links to the full details.

## The short version

- This site sets **no cookies**. It runs **no analytics, no advertising and no trackers**, so there is no consent banner.
- If you join the waitlist, we store **your email address, the date you joined, and which form you used**. We use it to tell you when Dory is ready to install, and for nothing else.
- To have your email removed, write to [admin@dory.systems](mailto:admin@dory.systems).

## Who we are

Dory is a Mac app published at dory.systems by Jacobo Mesonero Romanos, trading as Mnemo Technologies Labs, who runs this site and is responsible for the personal data described here. For anything about this policy or your data, contact [admin@dory.systems](mailto:admin@dory.systems).

## Visiting the site

The site is a set of static pages. It does not set cookies, does not use local storage to track you, and loads no third-party scripts, fonts or images: everything it shows is served from dory.systems.

The site is hosted on Cloudflare Pages. As with any website, delivering a page to your browser means Cloudflare handles the technical details of the request, such as your IP address and browser type, to serve the page and protect the site from abuse. We do not use that data for analytics, and we do not combine it with anything else. Cloudflare's own handling is described in [Cloudflare's privacy policy](https://www.cloudflare.com/privacypolicy/).

## The waitlist

**What we collect.** When you join, we store:

- your email address, in lower case;
- the date and time you joined;
- which form on the site you used (for example, the one at the top of the home page or the one at the bottom).

A hidden field on the form catches automated sign-ups; if a bot fills it in, nothing is stored.

**Where it is kept.** In Cloudflare Workers KV, a storage service of our host, Cloudflare.

**What we use it for.** To write to you when Dory is ready to install. We will not send marketing beyond that, and we do not sell, rent or share your address with anyone.

**How long we keep it.** Until the launch message has been sent and the waitlist has served its purpose, or until you ask us to remove it, whichever comes first.

**Your choices.** You can ask us at any time to show you what we hold, correct it, or delete it. Write to [admin@dory.systems](mailto:admin@dory.systems) from the address concerned. Depending on where you live, you may also have the right to object, to restrict processing, and to complain to your data-protection authority.

**Legal basis.** Where the GDPR applies, we rely on your consent, which you give by submitting the form and can withdraw at any time.

## Email to us

If you write to admin@dory.systems, we keep your message to answer it. Our email is routed through Cloudflare Email Routing to the inbox we read.

## How the Dory app handles data

This section summarises the product; it is not a separate policy for the app. The full statements are Dory's [agent manual](/manual.md) and its [known limits](/limits/).

- **Dory runs on your Mac.** It reads the sources you connect, remembers what you said, and serves a context capsule to your own AI tools over MCP and hooks. The store is encrypted.
- **What Dory serves goes to the assistants you connect**, and those may be cloud services with their own policies. Memory reaches an assistant only through that assistant's gate: its sharing (Work, Personal or nothing), your never-say rules, the sensitive-topic floor, and containment. Journals, notes and any personal-life source are known to Dory and never said.
- **Every delivery leaves a disclosure record.** `dory explain --last` explains the last delivery; `dory why <id>` says why Dory holds a memory and whether an assistant would be told it.
- **Other people's text is relayed by default.** A colleague's message or a shared document can reach your assistants, marked as relayed. You can narrow that per assistant.
- **Agents cannot widen what Dory shares, grant it data, spend your money or erase anything.** Those are yours, approved in Dory with Touch ID.
- **Dory Reach**, when it is available, will let web assistants reach your Mac through a relay that forwards encrypted traffic it cannot read; the relay sees metadata. See [known limits, section 4](/limits/#4-dory-reach-web-assistants-reaching-your-mac).

## Changes

If this policy changes, the new version will be posted here with a new date. If a change affects how we use waitlist emails, we will tell people on the list before it takes effect.