Privacy
Updated 10 October 2026. Operator details and Microsoft 365 as the email service are confirmed. The explicitly identified operational and legal questions remain open. Publication is authorized by the operator; it is not a legal review or certification of completeness.
Email subscriptions: beta updates and SATOSHI News
Optional subscriptions cover only the topics explicitly selected: up to two messages about the launch call and Open Beta opening, or SATOSHI News about once a month. Each topic can be selected and cancelled independently. Signing up does not create a Member account.
The controller is HIGH NRGY LLC (contact details above). We process your email address, language, choices and confirmation records to send and manage your selected messages. Where GDPR applies, sending relies on your consent under Article 6(1)(a). You can withdraw it for the future at any time through the unsubscribe link or email preferences.
Resend (Plus Five Five, Inc., USA) handles delivery and subscription preferences. Its Data Processing Addendum includes EU Standard Contractual Clauses for transfers to the USA. A European sending region does not move stored data out of the USA. Verification tokens and consent evidence are also stored in this website’s database. Links are valid for 24 hours and only token hashes are stored. Temporary pseudonymous counters limit abuse. Our sign-up code does not log plain IP addresses or include open or click trackers.
Regular cleanup removes tokens and unconfirmed requests from seven days of age; new requests also trigger cleanup. Consent evidence is kept while subscriptions are active and, after full withdrawal, until the end of the third following calendar year for accountability and defence of claims. Where GDPR applies, this evidence retention relies on Article 6(1)(c), together with Articles 5(2) and 7(1), and Article 6(1)(f). Overdue inactive evidence is then deleted in regular cleanup; active subscriptions are preserved. Resend unsubscribe records continue to enforce delivery suppressions. For access or erasure requests, contact info@satoshi.coach.
Controller and scope
HIGH NRGY LLCLimited Liability Company, Florida, USA
7901 4th St N, Ste 300
St. Petersburg, FL 33702
USA
Represented by: Isabell Petrus
Member-managed; sole member and authorized representative
Florida Document No.: L23000275713
Contact: info@satoshi.coach
Privacy enquiries can be sent to info@satoshi.coach. This notice concerns the public educational portal, not registration, payment or account processes in the separate Member App. No data protection officer or EU representative has been confirmed; applicability requires review.
Delivery and technical access data
The project uses ChatGPT Sites and a Cloudflare Workers runtime. HTTP requests technically involve information such as IP address, requested URL, timestamp and browser/device details. Actual contractual providers, subprocessors, enabled logs and retention periods must be confirmed against hosting documents.
Browser storage
The intro uses sessionStorage key satoshi-signal-entered to remember entry in the browser session. Session ending and manual deletion depend on the browser. Language follows the URL. The current portal starts dark; an older theme component can store satoshi-community-theme in localStorage on relevant legacy pages until deleted. Current Journey players do not store learning progress in their own code.
Audio, video and legacy play counters
Journey audio, artwork and the phone loading video are served from the website origin. The phone prepares those files and the Journey route. Audio starts only on user action. Legacy workshop routes additionally use a sessionStorage play identifier and a D1 counter containing episode, identifier and timestamp. A documented deletion period is missing. The current Journey player does not use that counter.
The legacy video player can embed YouTube-nocookie after “Load video” when a video source is configured. This establishes an external connection, unlike a plain link. Active video sources and any required consent must be checked before public release.
External links and contact
WhatsApp and Telegram are ordinary external links, not embedded widgets. Their platforms are visited when deliberately opened and their own privacy notices apply there. Emails to info@satoshi.coach involve processing the supplied sender address, message and technical communication data to handle the enquiry. The mailbox is operated through Microsoft 365. The actual Microsoft contracting entity, tenant region, processing agreement and configured retention remain to be verified; exclusive EU storage is not asserted. Please do not send unsolicited sensitive information.
Microsoft Trust Center · Privacy
Purposes and proposed legal bases — for review
Where GDPR applies, this draft proposes Article 6(1)(f) for technically secure delivery and troubleshooting: an interest in an available, secure website. The required balancing assessment and actual log settings remain to be confirmed. General enquiries are also proposed under Article 6(1)(f); contractual or pre-contractual enquiries may fall under Article 6(1)(b). Statutory retention requires a specific applicable obligation under Article 6(1)(c). This proposed mapping does not replace an operational review.
Recipients, retention and international processing
The confirmed controller is based in the USA. Technical delivery uses the Sites/Cloudflare infrastructure identified in the project. Exact provider entities, contractual roles, subprocessors, processing regions and transfer mechanisms cannot be established from source code alone and must be completed from applicable contracts. No exclusively European storage or specific certification is asserted. Platform-log and email retention remain approval items; no invented day-based period is stated.
Private preview versus public operation
The private preview uses ChatGPT sign-in and checks authenticated identity against the existing owner authorization. This is not public Member registration. Authentication cookies and some expiry rules are controlled by the platform provider and cannot be determined solely from portal code.
Legal bases, rights and outstanding provider review
Purposes and appropriate legal bases for delivery, security, preferences and contact must be finalized per processing activity. Possible legitimate interests require balancing; non-essential device storage or third-party embeds cannot be authorized by this notice alone. No external font loaders or marketing trackers were identified in inspected portal code. This does not establish the absence of platform diagnostic data.
Where GDPR applies, its conditions govern rights of access, rectification, erasure, restriction, portability, objection and complaint to a supervisory authority. Consent may be withdrawn prospectively. The contact route, competent authority, recipients, deletion criteria and any international transfers with appropriate safeguards remain to be completed.
Sources and approval
Basis: current portal code and HIGH NRGY LLC particulars confirmed by the operator on 5 October 2026. App contracts have not been copied wholesale. The following official and provider sources inform review but do not confirm the actual operational arrangements.