Privacy Policy

This Privacy Policy explains how BlueTier Operations collects, uses, discloses, and protects personal data when you visit bluetieroperations.com (the "Site"), and the rights you have over that data. We deliberately collect very little.

1. Who we are (data controller)

BlueTier Operations LLC ("BlueTier", "we", "us", "our"), a Nevada limited liability company based in Las Vegas, Nevada, USA, is the data controller for personal data processed through this Site.

Contact for all privacy matters: ops@bluetieroperations.com.

2. Scope

This policy covers the marketing Site at bluetieroperations.com only. Our individual products — Black_Wall (blackwalltier.com), Traceipt (traceipt.xyz), and Lethe — are separate services with their own terms and privacy notices. This Site does not host user accounts, and we do not sell products directly through it.

3. At a glance

Question	Answer
Do you need an account?	No.
Do you track me by default?	No. Analytics load only after you click "Accept".
Do you use advertising trackers?	No.
Do you sell or "share" my personal data?	No — never, for any purpose.
Who else can see the data?	Our analytics provider (PostHog) and our hosting/CDN provider (Cloudflare), acting on our instructions.
Can I get my data deleted?	Yes — email us and we'll action it.

4. Data we collect, why, and the legal basis

We collect the following categories of personal data:

Category	Examples	Purpose	Legal basis (GDPR)
Usage & analytics (only after consent)	Pages viewed, clicks, referring URL, approximate location derived from IP (we do not retain your full IP), and device and browser type. We do not use session replay/recording.	Understand how the Site is used and improve it	Consent — Art. 6(1)(a)
Consent record	Your accept/decline choice and its timestamp, stored in your browser	Remember your choice; demonstrate compliance	Legal obligation / legitimate interests — Art. 6(1)(c)/(f)
Communications	Your email address and message contents if you email us	Respond to and manage your inquiry	Legitimate interests — Art. 6(1)(f)
Technical & security logs	IP address and request metadata processed transiently by our CDN to serve the Site and protect it from abuse	Deliver the Site securely; prevent attacks	Legitimate interests — Art. 6(1)(f)

We do not collect special-category data, and we do not use automated decision-making that produces legal or similarly significant effects on you.

5. Cookies & local storage

We use the minimum storage needed. Analytics storage is set only if you accept.

Name	Set by	Purpose	Category	Duration
bt-consent	BlueTier (localStorage)	Remembers your analytics choice	Strictly necessary	Until you clear site data
ph_* / __ph*	PostHog	Product analytics — only after consent (no session replay)	Analytics (optional)	Up to 12 months
__cf*	Cloudflare	Security and load-balancing of the Site	Strictly necessary	Session / up to 12 months

Strictly-necessary items are exempt from consent because the Site cannot function or stay secure without them. You can clear all of them any time via your browser's site-data controls.

6. Consent & how to withdraw it

On your first visit we show a banner. Nothing analytics-related runs until you choose. If you accept, you can withdraw consent at any time by clearing this Site's data in your browser (which removes the bt-consent record and re-displays the banner) or by emailing us to object. Withdrawing consent does not affect processing that already took place while consent was valid.

7. Service providers (processors)

We share personal data only with providers that process it on our behalf, under contract, for the purposes above — never for their own purposes:

• PostHog Inc. — product analytics (session replay/recording is disabled). Processes usage data described above. See posthog.com/privacy.
• Cloudflare, Inc. — hosting, content delivery, and security. Processes IP addresses and request metadata to serve and protect the Site. See cloudflare.com/privacypolicy.

We may also disclose data where required by law, to enforce our terms, or to protect our rights, safety, or property.

8. International data transfers

We are US-based, and our providers process data in the United States. If you access the Site from the EEA, the UK, or Switzerland, your personal data may be transferred to the US. Where required, these transfers rely on appropriate safeguards — the European Commission's Standard Contractual Clauses (and the UK Addendum), and/or our providers' certification under the EU–US Data Privacy Framework — together with supplementary measures. You may request a copy of the relevant safeguards using the contact details below.

9. Data retention

• Analytics data is retained by PostHog on our behalf for no longer than needed to understand Site usage (and no longer than the cookie durations above), then deleted or aggregated.
• Consent record persists in your browser until you clear it.
• Emails are kept only as long as needed to handle your inquiry and meet any legal record-keeping obligations, then deleted.
• Security logs are retained by our CDN for a short period for abuse prevention.

10. How we protect data

The Site is served over HTTPS. We minimize what we collect, gate analytics behind consent, and rely on reputable providers with their own security programs. No method of transmission or storage is 100% secure, but we take reasonable measures appropriate to the low sensitivity of the data involved.

11. Your rights (EU / UK / EEA)

If the GDPR or UK GDPR applies to you, you have the right to:

• Access — obtain a copy of your personal data;
• Rectification — correct inaccurate or incomplete data;
• Erasure — have your data deleted ("right to be forgotten");
• Restriction — limit how we process your data;
• Portability — receive your data in a portable format;
• Object — object to processing based on legitimate interests;
• Withdraw consent — at any time, without affecting prior processing;
• Lodge a complaint — with your local supervisory authority (in the UK, the ICO; in the EEA, your national Data Protection Authority). We'd appreciate the chance to resolve it first.

We respond to verified requests within one month, as required by law. There is no charge unless a request is manifestly unfounded or excessive.

EU & UK representative (Article 27)

BlueTier Operations LLC is established outside the EEA and the UK and has not appointed an Article 27 representative. Our processing of EEA and UK personal data through this Site is occasional and low-risk — limited to consent-based analytics — and does not involve large-scale processing or any special-category data, so we rely on the exemption in Article 27(2) of the EU GDPR and the UK GDPR. If you are located in the EEA or the UK, you can exercise any of the rights above by emailing ops@bluetieroperations.com, and you retain the right to complain directly to your local supervisory authority (see above).

12. US state privacy rights (California & others)

Under the California Consumer Privacy Act as amended by the CPRA, California residents have rights to know, access, delete, and correct personal information, and to opt out of "sale" or "sharing" and of certain targeted advertising.

• Categories collected (last 12 months): identifiers (e.g., IP-derived approximate location, device identifiers), internet/network activity (usage and interaction data), and — if you contact us — the identifiers and contents you provide. Sources: directly from you and automatically from your device via our providers.
• Business purposes: analytics, Site delivery and security, and responding to inquiries (as described above).
• We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the CPRA. We have not done so in the preceding 12 months.
• No financial incentives are offered in exchange for personal information.
• Non-discrimination: we will not deny you service, charge a different price, or provide a different quality of service for exercising your rights.
• Authorized agents may submit requests on your behalf with proof of authorization.

Residents of other US states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, and Texas) have similar rights to access, delete, correct, and opt out. To exercise any of these rights, contact us as described below; we will verify your request before acting on it.

13. Do Not Track & Global Privacy Control

Because we do not track you without consent and do not sell or share personal data, there is nothing to opt out of by default. Where our systems recognize a Global Privacy Control (GPC) signal, we treat it as a valid opt-out request.

14. Children

This Site is intended for businesses and professionals and is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

15. Third-party links

The Site links to third-party sites (including blackwalltier.com, traceipt.xyz, and GitHub). We are not responsible for their privacy practices; review their policies before providing data.

16. Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, take reasonable steps to notify you. Your continued use of the Site after an update constitutes acceptance of the revised policy.

17. How to contact us / exercise your rights

To make any privacy request, or to ask a question about this policy, email ops@bluetieroperations.com with the subject "Privacy request". Please tell us what you'd like to do (access, delete, correct, opt out, etc.) so we can verify and action it. We will not discriminate against you for exercising any of your rights.

BlueTier Operations LLC · Las Vegas, NV, USA · ops@bluetieroperations.com