Legal

Privacy Policy

Last updated 26 August 2026

In short: we collect nothing unless you write to us. There are no analytics, no advertising, no tracking cookies, and no mailing list. If you send a funding inquiry, we use it to reply to you and for nothing else. We never sell or rent personal information.

1. Who is responsible

Tessera Institute, operated by a Texas S corporation, is responsible for the personal information described here. You can reach us at ov@generationix.net about anything on this page, including a request to see or delete your information.

2. What we collect

When you submit the funding form

We receive exactly the fields the form contains:

Please do not include sensitive personal information in the message field. It is a funding inquiry form and is not the right channel for health, financial account, government identifier, or similar data.

When you simply read the site

Nothing is stored in your browser. The site sets no cookies, uses no local storage, and runs no analytics, advertising, or tracking scripts of any kind. We do not build a profile of you and we cannot recognize you across visits.

Our web server writes standard access logs, which record the requesting IP address, the page requested, the time, the referring page, and the browser's user-agent string. These exist to operate and secure the server — diagnosing outages and identifying abuse — and are not used to identify or profile individual readers.

3. Why we may lawfully use it

For readers in the United Kingdom or the European Economic Area, our legal bases under the UK GDPR and GDPR are:

Legitimate interests
Replying to a funding inquiry you chose to send, keeping a record of our funding conversations, and keeping the site available and secure.
Legal obligation
Retaining records we are required to keep, including tax and corporate records, and records relating to grants and other funding.

We do not rely on consent for the site itself, because it sets no non-essential cookies and performs no tracking. There is nothing here to consent to.

4. Who else sees it

We share personal information only with the following, and only as needed:

We do not sell, rent, or trade personal information, and we do not share it for advertising. We do not use it to train machine-learning models. Our research outputs are published openly, but they are scientific results — they never contain information from funding inquiries.

Fonts are loaded from Google

The site loads its typefaces from Google Fonts. When your browser fetches them, Google receives your IP address and user-agent as part of that request. We do not send Google any other information, and we use no Google analytics or advertising products. If you prefer to avoid this, blocking fonts.googleapis.comleaves the site fully readable in fallback typefaces.

5. International transfers

We are based in the United States, and our providers may process information there or in other countries. Where information is transferred out of the UK or EEA, we rely on appropriate safeguards, such as the European Commission's standard contractual clauses or an adequacy decision covering the recipient.

6. How long we keep it

Funding inquiries
Kept while the conversation is active and for up to three years afterwards, so we can pick up a thread with a funder who returns to us later. Ask us and we will delete yours sooner.
Records of funding received
Kept as long as required for tax and audit purposes, which is typically seven years.
Server access logs
Rotated automatically and retained for a short operational window, on the order of weeks.

7. How it is protected

The site is served over HTTPS. It is a static page with no database and no user accounts, so there is no store of reader information to breach. Inquiries reach us by email and are held in accounts protected by strong authentication. Access is limited to the people who need it to reply to you.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. Please keep that in mind when deciding what to put in the message field.

8. Your rights

Depending on where you live, you may have the right to request a copy of the personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to receive it in a portable form. Residents of California and similar jurisdictions have comparable rights, including the right not to be discriminated against for exercising them. Since we do not sell or share personal information for advertising, there is no opt-out for us to offer.

To exercise any of these, write to ov@generationix.net. We will respond within 30 days. We may need to confirm your identity before acting on a request, so that we do not disclose one person's information to someone else.

If you are in the UK or EEA and think we have handled your information improperly, you may complain to your national data protection authority. We would appreciate the chance to address it first.

9. Children

This site is aimed at funders and researchers and is not directed at children under 16. We do not knowingly collect information from children. If you believe a child has sent us information, write to us and we will delete it.

10. Changes to this policy

If we change how we handle personal information, we will update this page and change the date at the top. The page's revision history is public in our repository, so what changed and when is part of the record rather than something you have to take on trust. For a material change, we will describe it clearly rather than quietly editing the text.

Contact

Tessera Institute —ov@generationix.net
Questions, access requests, and deletion requests all go to the same address.