Your data.
Your node.
Your right.
Your inalienable property.
Interrelated with others.

I · The principle

You are not a user.
You are a platform owner.
A node of the legal network.

Conventional platforms treat personal data as a resource they extract, store, and monetise. The user is the product. The privacy policy is the contract by which the platform justifies that extraction. We reject this model — not as a legal strategy, but because it contradicts what 1love.works is.

A PNC holder is a founding node in the measurement network of the European sovereign platform. A node is not a user record in a database. It is a sovereign participant — owning its own code, its own fraction of the platform, its own data. The network is the aggregate of nodes. The platform reads from nodes. It does not own them.

This is the direction of the architecture. Some of it is already live. Some of it — full on-chain anchoring of node identity, decentralised storage, wallet-based authentication — is being built. This document is honest about both.

II · What lives where

Your device.
Your server.
Nobody else's.

Here is a precise account of every data point this platform touches, where it lives, and who can access it.

III · The manifest interest form

The one place data
reaches a server.

When you submit the manifest interest form, your email address, country, region, city, and interest areas are transmitted to a research database hosted by Supabase (EU region). This is the only point in the platform where personal data leaves your device.

The legal basis is your explicit consent, given by submitting the form after reading this document. The purpose is singular: to build an empirical map of territories where codification is needed. The data is not used for marketing, profiling, advertising, or any purpose beyond that map.

Supabase acts as a data processor under a Data Processing Agreement. Data is stored in the EU. Supabase does not process your data for its own purposes.

You may request deletion of your submitted data at any time by emailing gmsolas@sustainab-law.eu with the subject line "Data deletion request". Your record will be deleted within 30 days.

IV · What we will never do

The absolute limits.

• Sell, rent, or share your data with any third party for commercial purposes — ever. This would corrupt the measurement network and contradict the founding logic of phenography©.
• Use your data for advertising, behavioural profiling, or algorithmic targeting of any kind.
• Retain your data beyond the purpose for which it was submitted. The empirical map is a research instrument, not a CRM.
• Create hidden data flows. Every data point is accounted for in the table above. If that table changes, this document is updated and the change is noted with a version date.
• Claim ownership of your node. Your PNC, your node identity, your declared data — these are yours. The platform is the measurement instrument. It does not own the nodes it measures.

V · The Web3 architecture — where we are going

Every node a sovereign.
No platform holds the network.

The current architecture is a transitional state. The direction is fully decentralised node identity: each PNC holder authenticates via a cryptographic wallet, their certificate is anchored on-chain, and their node data is stored on infrastructure they control — not on any server operated by or on behalf of 1love.works.

In this architecture, GDPR compliance is not a policy question — it is a mathematical fact. Data that never reaches a controller cannot be processed by one. The network reads the aggregate of node measurements. It holds no individual records. The phenography© protocol defines what is measured. The nodes decide what they declare.

This document will be updated as each layer of this architecture is implemented. The transition from centralised to decentralised storage will be communicated to all registered participants before it occurs.

VI · Your rights

GDPR rights —
and beyond GDPR.

Under GDPR (Regulation EU 2016/679), you have the following rights with respect to any personal data processed by this platform:

• Access. You may request a copy of all personal data we hold about you.
• Rectification. You may request correction of any inaccurate data.
• Erasure. You may request deletion of your data at any time, without condition.
• Portability. You may request your data in a structured, machine-readable format.
• Objection. You may object to any processing at any time.
• Complaint. You have the right to lodge a complaint with your national data protection authority.

Beyond GDPR: the architecture of this platform is designed so that most of your data never reaches a controller at all. The node registry lives on your device. Your PNC is yours. These are not privacy promises — they are architectural facts.