Qalarc is an AI systems studio based in Sydney, Australia. For questions about this policy or your information, contact [email protected].
This policy is written to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It covers this website (qalarc.com) and its sub-pages, including project pages, demos, the blog, and the site guide chat.
When you browse the site, our first-party analytics records:
We also keep a short log of questions asked to the site's AI guide and terms typed into the project search (capped, retained 90 days) so we can see what people are looking for and improve the answers.
We do not use cookies for analytics, we do not track you across other sites, and we do not build individual profiles. A one-way hash of your IP address and browser string is used solely to count unique visitors per day; it cannot be reversed to identify you.
Liking a project stores a random browser-generated identifier (kept in your own browser's local storage) so you can't like twice — we never learn your name from it. Comments store the name you choose to display (optional), your message, and a one-way hash used for spam rate-limiting. Comments are public; don't put personal information in them you wouldn't post publicly.
If you use the contact form, feedback widget, or join a waitlist, we receive what you submit (e.g. name, email address, message). We also keep your IP address briefly for rate-limiting and spam prevention. The site guide chat stores your conversation for 90 days (to improve answers and for abuse prevention), keyed to a random session id.
The chat on this site is an AI assistant. Two layers handle your message:
What this means for you:
This policy covers qalarc.com only. Our other properties (e.g. project and client sites) are separate services with their own policies.
We do not sell or rent information, we do not run advertising, and we do not use your information for cross-site behavioural tracking. Full stop.
Some outbound links (marked as partner or sponsored links, e.g. our hardware partner GMKtec)
are affiliate links: if you buy through one, we may earn a commission at no extra cost to you.
Affiliate relationships never affect what we recommend or what we say about a product — we only
link hardware we actually use. These links carry rel="sponsored" and open the
merchant's site, which is subject to the merchant's own privacy policy.
We don't sell or trade your information. We use a small number of service providers to operate the site:
| Provider | Role | What they process |
|---|---|---|
| Cloudflare | Hosting, edge network, storage | Site content, analytics counters, comments (stored in Cloudflare's infrastructure) |
| Z.AI | AI language model processing | Site-guide chat messages and recent conversation context, used to generate replies. Under Z.AI's Data Processing Addendum for API services, this content is processed in real time to produce the reply and is not stored on their servers or used to train their models |
| Resend | Transactional email | Messages you send us via contact/feedback forms, delivered to our team inbox |
| GitHub (Microsoft) | Source hosting | Site source code only — no visitor data |
Some of these providers store data outside Australia (mostly the United States). Where that happens, we remain accountable for the information under APP 8 and rely on providers' contractual and technical safeguards. We may also disclose information if legally required.
| Data | Kept for |
|---|---|
| Analytics daily aggregates | ~4 months, then expire automatically |
| Visitor-uniqueness markers | 50 days, then expire automatically |
| Rate-limit records | 10 minutes |
| Chat transcripts | 90 days |
| AI questions + search terms | 90 days, capped per day |
| Comments and likes | Until removed by us or requested by you |
| Feedback / contact / waitlist submissions | As long as needed to respond and for our records |
You can ask us to:
Email [email protected] — we're a small studio, a real person answers. We respond within a reasonable period. If you're unsatisfied with how we handle a privacy matter, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).
The site is served over HTTPS with HSTS enabled. Inputs are validated and rate-limited at the edge; comments are HTML-escaped on storage and again on display; suspicious submissions are quarantined rather than published. No system is perfect, but we hold no password, payment or sensitive-personal data stores — there is very little worth stealing here, by design.
This site is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we'll delete it.
Some interactive demos use your webcam or microphone (e.g. gesture control, face tracking, biomarker analysis). All processing happens locally in your browser — no video or audio is uploaded, transmitted or stored anywhere. Your browser will ask for permission before any camera or microphone access, and you can revoke it at any time.
If we change how the site handles information in a way that matters, we'll update this page and the effective date above. Continued use of the site after changes means you accept the updated policy.
Qalarc · Sydney, Australia · [email protected]