albertlane.net › Legal › Privacy Policy
Albert and Robot Don't Fuck Around™
Privacy Policy
Albert and Robot Don't Fuck Around™, and that includes your data. We collect what the Services need to run, prove and protect themselves, and nothing else. We do not sell it. We do not rent it. We do not feed it to ad networks.
This Privacy Policy explains what Albert Lane ("Albert", "we", "us") collects through albertlane.net and www.albertlane.net (including /research, /business-models, /lane-vm, /delta-commons, /comics, /ledger, /license-violations, /pay, /live and every API under albertlane.net/api), aros.albertlane.net (AR^OS, the AR^OS Wallet and the owner views), investors.albertlane.net, swarm.albertlane.net (the AR^OS Swarm and Ask Robot), forge.albertlane.net (ALDI Forge™), id.albertlane.net, api.albertlane.net, lanevm.albertlane.net, and every other host under albertlane.net (the Services), why, how long it is kept, and what you can do about it. The EULA governs your use of the Services.
1. The short version
- No sale of personal data. Ever.
- No sharing for advertising. No ad networks, no data brokers, no cross-context behavioral advertising.
- No ad tracking. No advertising or analytics cookies, pixels or third-party trackers on any page.
- Hashes in public, text in private. Public logs show hashes; the full text of chats and inquiries is visible to Albert only.
- Some records are permanent by design. Read section 4 before you submit anything.
Because we do not sell or share personal data, there is nothing to opt out of. We still honor Global Privacy Control signals as an opt-out request.
2. What we collect, why, and for how long
| What | Details | Why | How long | Who sees it |
|---|---|---|---|---|
| Website requests (all hosts) | IP address, browser user agent, request details and approximate country, processed by Cloudflare at the network edge. | Delivering the site, security, bot protection and stopping abuse. | Under Cloudflare's own retention. We do not run our own analytics. | Cloudflare; Albert for security investigations. |
| Rate limits and abuse checks | A one-way, salted hash of your network address (not the address itself), with timestamps and counts. | Limiting sign-ups, chats, inquiries and validator calls per network. | Kept with the related record (see the rows below). | Albert only. |
| AR^OS account (aros.albertlane.net) | Account ID, display name, role, passkey public key and credential ID, and sign-in session records. No passwords: your passkey's private key never leaves your device. | Signing you in and running your account and Wallet. | While your account exists. A session lasts 8 hours; only a hash of the session ID is stored. | Albert only. |
| Sign-up screening | Your name (sent to our sanctions screen; the sign-up record stores only its SHA-256 hash), the country you declare, the country and region Cloudflare detects, the screening outcome, list version, decision and reason. | Legal compliance: sanctions and location screening (see below). | Kept as a compliance record. | Albert only. |
| Photo check (captcha) | The challenge, the tiles you select and a one-time pass. | Telling people from bots before sign-up, chats, inquiries and validator calls. | A challenge expires in 5 minutes and a pass in 10 minutes; used and expired records may stay in the database. | Albert only. |
| AR^OS Wallet and payment records | Payment intents (amount, currency, a hash of the recipient name, status and screening reference), Wallet ledger entries, and, only if you use those features, linked wallet addresses (screened) and location check-ins. | Running the Wallet, recording payments, and the screening the law requires before payments. | Wallet ledger entries are permanent (append-only). Identity screening is valid for 30 days and then re-run. | You and Albert; public ledger entries show hashes and amounts, not your name. |
| PayPal payments | We never receive your card or bank details. You pay Albert's PayPal account directly, and PayPal handles your payment data. We record that Albert confirmed receipt. | Getting paid; Albert confirms each payment by hand. | Payment confirmations stay in the Wallet ledger permanently. | PayPal (under its own privacy policy); Albert. |
| AI chats (Lane-VM Assistant, Research Assistant) | Your messages (up to 800 characters each), the assistant's replies, a session reference, the hashed network address and technical metadata. Answers are generated by Meta Llama 3.3 70B running on Cloudflare Workers AI. | Answering your question, preventing abuse and keeping a verifiable record. | Kept permanently in an append-only, hash-chained log. Full text is visible to Albert only; the public chain shows hashes only. A chat session lasts 2 hours. | Albert (full text); Cloudflare Workers AI (processing); the public sees hashes only. |
| Robot's validator (Sovereign Binding) | The intent text you submit, Robot's decision and reason, packet hashes and the hashed network address. | Running Robot's approve-or-veto decision and its public log. | Permanent, append-only. Intent text is visible to Albert only; the public log shows hashes only. | Albert; Cloudflare Workers AI; the public sees hashes only. |
| Lane-VM lease requests | Company, contact name, contact email, declared country, the country Cloudflare detects, use case, term, instances, seats, notes, and your mobile number only if you opt in to texts. | Answering your request and preparing a lease. | Kept as a business record; the lease log is hash-chained and permanent. | Albert only; the public lease log shows hashes. |
| Investor inquiries (investors.albertlane.net) | Name, organization, investor type, country, interests, message, data-room request, screening outcome, and your email only if you opt in to follow-up. | Answering your inquiry and data-room requests. | Kept as a business record; the inquiry log is hash-chained and permanent. | Albert only; the public log shows hashes. |
| Texts | Your mobile number, only if you tick the opt-in box. | Texting you about your request. | With the request it belongs to. Reply STOP and we stop. | Albert only. |
| Messages you send us and your email address. Mail for albertlane.net is received by Proton Mail. Albert may keep copies in his own storage and forward them to his own inboxes. | Replying to you. | Until Albert deletes them. | Albert; Proton (mail host). | |
| AR^OS Swarm agents | Nothing about visitors. The read-only agents check our own public pages, DNS, sitemaps and hash chains. | Monitoring that the platform works. | The swarm log is public and permanent. | Public. |
| Cookies and local storage | One sign-in cookie, __Host-aros_os (Secure, HttpOnly, SameSite=Strict, 8 hours), on aros.albertlane.net only, plus AR^OS desktop preferences in your browser's local storage. Cloudflare may set its own security cookies to block bots. | Keeping you signed in and remembering your desktop settings. | 8 hours for the cookie; local storage until you clear it. | Your browser; Albert's servers check the cookie. |
We do not ask for, and you should not send, government ID numbers, health information, card numbers or bank details. We do not knowingly collect sensitive data, and we do not use your data to make automated decisions with legal effects, except the sanctions and location screening described in section 3, which a person reviews when it flags a possible match.
3. Sanctions and location screening is a legal requirement
U.S. law, including the sanctions regulations administered by the Treasury Department's Office of Foreign Assets Control (OFAC), prohibits dealings with sanctioned persons and with comprehensively sanctioned countries and regions. So before sign-up, investor inquiries and any payment step, the Services check the location Cloudflare detects and screen the names you give against U.S. sanctions lists through our own screening service. Screening fails closed: if it cannot run, the step pauses. A possible match is held for manual review by Albert, and you can ask for that review at lane.albert@pm.me. We keep screening outcomes as compliance records.
4. Permanent records: the ledger and hash chains
Transparency is the product. Several parts of the Services write append-only, hash-chained records that are designed so that nobody, including Albert, can edit or delete an entry without breaking the chain for everyone to see. These include the public ledger at albertlane.net/ledger, the AR^OS Wallet ledger, the Lane-VM lease log, the investor inquiry log, the AI chat chains, Robot's validator log and the swarm log. Fingerprints of the ledger are also timestamped daily on the Bitcoin blockchain through free OpenTimestamps servers, which receive only hashes.
These records are permanent and cannot be erased. Public entries hold hashes and event details, not your chat text or contact details. Some private records (such as full chat text) are also kept in append-only tables. Deletion requests cannot be applied to permanent records; if you do not want something kept permanently, do not submit it.
5. Who processes data for us
- Cloudflare, Inc.: hosting, network delivery, security and bot protection, Workers, D1 databases, R2 storage, KV and Workers AI (which runs the Llama models for the AI features).
- PayPal: when you pay Albert, you deal with PayPal directly under PayPal's privacy policy.
- Proton: email hosting for albertlane.net mail.
- OpenTimestamps calendar servers and the Bitcoin network: receive ledger hashes only, never personal data.
We disclose personal data to others only when the law requires it (for example, a valid court order), to protect the Services or other people from fraud, abuse or harm, or to enforce the EULA.
6. Your rights
You can ask to access the personal data we hold about you, correct it, or delete it where that is technically possible. Deletion cannot reach the permanent records in section 4, and we may keep records the law requires, such as screening outcomes. Close an AR^OS account or withdraw a request by emailing us; we will then stop using optional contact details such as your email or phone number.
State privacy laws. Where a state privacy law applies, including in California, Oregon and Washington, you may also have the right to know what categories of personal data we collect and disclose, to get a copy in a portable format, to opt out of sale, targeted advertising and profiling (we do none of these), and not to be treated differently for using your rights. In Oregon you can also ask for a list of the specific third parties we have disclosed your data to. We do not collect consumer health data as defined by Washington's My Health My Data Act.
How to ask. Email lane.albert@pm.me with your request. We will verify it is you, usually by asking you to confirm from the email address or account involved, and answer within 45 days (extendable once by 45 days where the law allows). An authorized agent may ask on your behalf with proof of authority. If we refuse, you can appeal by replying to our answer with the word "Appeal"; we answer appeals within 45 days for Oregon residents and within 60 days for others, and you may contact your state attorney general (in Oregon, the Oregon Department of Justice) if you disagree with the result.
7. Children
The Services are not for children. Do not use them if you are under 13, or under 16 where the law of your location requires a higher age. We do not knowingly collect children's personal data; if we learn we have, we will delete it where technically possible.
8. Security
We protect the Services with passkey sign-in (no passwords to steal), hashed session IDs, salted hashes instead of raw network addresses, HTTPS with HSTS, origin checks, rate limits and the photo check. Owner views require Albert's passkey. No system is perfectly secure, and we cannot guarantee that it is.
9. Where data is processed
Albert runs the Services from Oregon, United States. Cloudflare and our other providers may process data in the United States and in other countries where they operate. By using the Services you understand that your data is processed in the United States.
10. Changes and contact
We will post any change here with a new version number and effective date. This policy replaces the earlier archive-only notice at albertlane.net/privacy.html (last updated October 16, 2026), which described the site before accounts, chats and payments existed.
Privacy questions and requests: lane.albert@pm.me · @AlbertLane_net on X.
Version 1.0 · effective November 10, 2026 · see also EULA · text fingerprint at /legal/versions.json