Privacy Policy

This policy explains how PORTABLEMIND, Inc. (“PortableMind”, “we”, “us”) handles personal information. It covers the portablemind.io website, our checkout, our email and SMS messaging, and our customer support.

There is one distinction that matters more than anything else in this document, so it comes first: the website and the product are two different things. The website is a normal e-commerce site and behaves like one. The PortableMind USB is an offline device that collects nothing and transmits nothing. Sections 3 and 4 cover each separately.

PORTABLEMIND, Inc. is the data controller for the information described here. We are incorporated in the State of Delaware, United States.

• The USB itself has no telemetry. Nothing you type into PortableMind reaches us, ever.
• Buying something means we hold your name, email, shipping address, and phone. Stripe handles the card, we never see the full number.
• We use privacy-first analytics on every visit to understand which pages work.
• Advertising and conversion tracking is off until you turn it on. The consent banner defaults to denied, and we honor Global Privacy Control automatically.
• We do not sell your personal information for money.
• You can ask us to show you, correct, or delete what we hold. Email us and we will do it.

Nothing. This is the whole point of the product.

Every model on the drive runs locally on the Windows or macOS machine you plug it into. Your prompts, the model’s outputs, any files you point it at, and your conversation history are processed on your hardware and written only to your hardware. There is no account, no login, no API key, no cloud sync, and no crash reporting. You can disconnect the machine from all networks and PortableMind works identically, which is the simplest way to verify the claim yourself.

The one time the product touches the network is when you choose to run the optional updater at /update. That downloads a firmware package from our storage provider. It sends us no content from your drive, and updates are never required.

For the technical breakdown, including how to verify the network posture yourself, see privacy & security and our security page.

Information you give us

Information collected automatically

• Standard server and request data: IP address, browser user agent, the pages you request, referring URL, and timestamps.
• Analytics data about how pages are used, collected through Google Analytics 4.
• Campaign attribution: UTM parameters, the referring site, your landing page, and any referral code in the link, stored in your browser for the session and attached to an order if you buy.
• Advertising identifiers from cookies set by Google, Meta, or TikTok, but only if you have granted advertising consent.
• An anonymous A/B test bucket that decides which visual theme you see.

Information from third parties

• Stripe tells us the outcome of your payment, the last four digits and brand of your card, and the address you entered at checkout. Stripe also flags suspected fraud.
• Shipping carriers return tracking and delivery status for your parcel.
• If you reached us through a referral link, we record which referral code was used so the referrer gets credit.

If you are in the EEA or the UK, the right-hand column is our lawful basis under Article 6 of the GDPR.

We do not use your personal information to make automated decisions that produce legal or similarly significant effects about you, and we do not profile you for anything beyond the advertising measurement described in section 7.

We keep this list complete and current rather than vague. Items marked essential are required for the site to function or to respect a choice you made, and are not used for advertising.

You can clear all of these from your browser settings at any time. Clearing pm-consent makes the consent banner appear again on your next visit.

Third-party resources loaded by the site

• Google Fonts serves our typefaces, which discloses your IP address to Google on page load.
• The in-browser demo at /demo downloads AI model files from a public CDN and from Hugging Face, which discloses your IP address to those services. The demo runs entirely in your browser and your demo prompts are not sent to us.
• The live grid map at /grid is assembled on our server. Your browser never contacts the upstream energy data providers.

Advertising and measurement sharing is denied by default. It turns on only if you choose “Allow all” on the consent banner. Until then we operate under Google Consent Mode v2 with ad storage, ad user data, and ad personalization all set to denied, and we do not load the Meta or TikTok pixels at all.

If you do grant consent, then when you complete a purchase we send a conversion event to Google, Meta, and TikTok from our server so those platforms can attribute the sale to the ad you clicked. That event contains:

• Your email address, phone number, first name, last name, and country, each irreversibly hashed with SHA-256 before it leaves our server. The platforms match the hash against their own records. We never send these in readable form.
• The order value, currency, and product tier.
• Your IP address and browser user agent, which those platforms require in unhashed form for matching.
• The advertising cookie identifiers described in section 6, and the click identifier from the ad you clicked, if any.

Global Privacy Control

If your browser or a browser extension transmits a Global Privacy Control signal, we treat it as a binding opt-out of advertising and measurement sharing. We apply it automatically on page load, you are not asked to confirm, and the consent banner does not override it.

We share personal information only with the service providers below, and only for the purpose listed. Each is bound by its own contract and processes data on our instructions. We do not sell your personal information for money, and we do not share it with data brokers.

Our internal order alert channel receives the order total, currency, and product tier only. It contains no customer name, email, or address.

Other situations where we may disclose

• When required by law, a court order, or a valid legal request. We disclose the minimum necessary.
• To establish, exercise, or defend legal claims, including chargeback and fraud disputes.
• To a buyer or successor if the business is sold or merged, in which case this policy continues to apply until you are told otherwise.
• Reviews you submit are published publicly with the name you provided. Do not put anything in a review you would not want public.

We operate from the United States and our service providers are largely US-based. If you order from outside the United States, your information is transferred to and processed in the US.

For transfers of personal data out of the EEA, the UK, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, as incorporated into our agreements with the providers listed in section 8. You may request more detail about a specific transfer by emailing us.

When a retention period ends we delete or irreversibly anonymize the data. If you ask for deletion earlier we honor it, except for records we are legally required to keep, which we isolate and stop using for any other purpose.

• All traffic to portablemind.io is encrypted with TLS.
• Payment card data goes directly from your browser to Stripe, a PCI DSS Level 1 service provider. It does not pass through or rest on our servers.
• Access to customer records is limited to the people who need it to fulfill orders and answer support, and is protected by multi-factor authentication.
• Credentials and API keys are stored as environment secrets in our hosting provider, never in our code repository.
• Firmware downloads are served from private storage through short-lived signed links rather than public URLs.
• Personal identifiers sent to advertising platforms are hashed with SHA-256 before transmission.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal information we will notify you and the relevant regulators within the timeframes the law requires. If you believe you have found a vulnerability, email team@portablemind.io and we will work with you.

We extend the following to every customer regardless of location, because splitting people into privacy tiers by geography is indefensible:

• Access: ask what we hold about you and get a copy.
• Correction: have inaccurate information fixed.
• Deletion: have your information erased, subject to records we must keep by law.
• Portability: receive your data in a portable, machine-readable format.
• Opt out: unsubscribe from marketing at any time using the link in any email, or by replying to it.
• Objection: object to processing based on our legitimate interests.

Email team@portablemind.io from the address on your order, or tell us enough that we can find your record. We respond within 30 days, and we will never charge you for a request or treat you differently for making one.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to restrict processing, the right to withdraw consent at any time without affecting processing already carried out, and the right to lodge a complaint with your local supervisory authority.

In the UK that is the Information Commissioner’s Office. In the EEA it is the data protection authority for your country of residence. We would rather you came to us first so we can fix the problem, but that is your right and not conditional on contacting us.

We have not appointed an EU or UK representative under Article 27, because our processing of EEA and UK personal data is occasional and low-risk. Direct all requests to the email address above.

California residents have rights under the CCPA as amended by the CPRA, and residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have comparable rights. The rights in section 12 cover all of them, and the following disclosures are specific to those laws.

Categories collected in the last 12 months

• Identifiers: name, email address, postal address, phone number, IP address, and online identifiers.
• Commercial information: products purchased, order value, and purchase history.
• Internet activity: pages viewed, referring site, and interaction with our site.
• Geolocation: approximate location inferred from IP address and from your shipping address. We do not collect precise geolocation.
• Inferences: which campaign or referral brought you to us.

We do not collect sensitive personal information as that term is defined by the CPRA, so there is no “limit the use of my sensitive personal information” right to exercise here.

Sale and sharing

We do not sell personal information for money. However, if you grant advertising consent, our sharing of hashed identifiers and conversion data with Google, Meta, and TikTok is likely a “sale” or “share” for cross-context behavioral advertising under California law, so we disclose it as one rather than hide behind the technicality. The categories involved are identifiers, commercial information, and internet activity. We have not sold or shared the personal information of anyone we know to be under 16.

To opt out: choose “Essential only” on the consent banner, or enable Global Privacy Control, which we honor automatically as a valid opt-out signal. You may also email us and we will apply the opt-out to your record. Authorized agents may submit requests on your behalf with written proof of authorization.

PortableMind is sold to adults and this site is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email us and we will delete it promptly.

When we change this policy we update the “Last updated” date at the top. If a change materially affects how we use your information, we will say so prominently on this page and, where the law requires it, contact you directly and ask for fresh consent. Continuing to use the site after a change means you accept the updated policy.

PORTABLEMIND, Inc. is the controller of the personal information covered by this policy. For any privacy question, request, or complaint, email team@portablemind.io. A real person reads it, usually within one business day.

Related documents: Terms of Sale & Use, Returns & Refunds, and Shipping.

Does the PortableMind USB send my prompts anywhere?

No. Every model runs locally on your own Windows or macOS machine. Prompts, outputs, files, and conversation history stay on your hardware. The drive has no telemetry, no account, and no network callback, and it keeps working with networking fully disabled.

What personal information does portablemind.io collect?

If you buy something we collect your name, email, shipping address, and phone number, and Stripe processes your payment. If you join the email list or unlock the field guide we collect your email. Browsing the site collects analytics data and, only if you consent, advertising measurement data.

Does PortableMind sell my personal information?

We do not sell personal information for money. If you grant advertising consent, we share hashed identifiers with Google, Meta, and TikTok for conversion measurement, which counts as sharing for cross-context behavioral advertising under California law. Advertising consent is off by default and you can withdraw it at any time.

How do I delete my data from PortableMind?

Email team@portablemind.io from the address on your order and ask for deletion. We remove your marketing and analytics records, and we retain the minimum order and tax records that law requires us to keep.

Do you honor Global Privacy Control?

Yes. If your browser or extension sends a Global Privacy Control signal, we treat it as an opt-out of advertising and measurement sharing automatically, without you having to touch the consent banner.