Privacy

Origin's research pages are statically served. There are no accounts, no advertising networks, and no browser fingerprinting.

What we do not do

• No login or user profiles.
• No third-party ad pixels.
• No canvas, audio, or similar fingerprinting techniques.

Measurement (plain language)

During a documented acceptance run or an authorized public decision window, live measurement is on. Your browser stores a random pseudonymous client identifier in local storage. When you view a traced result, create a share link, or arrive through a signed share link, the browser sends that identifier and limited event context to the measurement service.

Before an event is written, the service transforms the identifier with a keyed HMAC using a server-held secret. The private durable ledger stores the resulting hash, event type, time, genealogy slug, share-token fingerprint when applicable, and any qualification exclusions; it does not store the raw browser identifier. Share-link creation is recorded for lineage but is never counted as propagation.

Automated crawlers and link-preview agents are excluded from qualified counts, as are operator arrivals, designated seed-token arrivals, same-client arrivals, invalid tokens, and duplicate qualifications. The private ledger is evaluated only against the authorized 14-day window for the probe decision.

Corrections

Correction forms validate structured fields. In this probe, submissions stay in your browser storage. Do not include secrets or sensitive personal data in notes.