Privacy writing fails in two common ways. One is a slogan that cannot survive contact with a live ad unit. The other is a statute paraphrase that never tells you which button to press. This essay is neither. It is the Oernoe team’s map of what control means across live hosts, what freedom does not mean, and which sentences we already had to walk back.
We are an independent technology company building privacy-first digital services. Anoepal operates the network. Public writing goes out as Oernoe Editorial Team. The point of privacy here is user control of data, sharing, and the freedom to leave — not a fantasy that no request ever touches a log, and not a network-wide claim that nothing is tracked while selected www pages may show Google ads.
## Privacy differs by hostname on purpose
The network is not one blob. www.oernoe.com is a publisher hub. search.oernoe.com is a search engine. account.oernoe.com is identity. chat, ai, docs, drive, health, and tracker are product surfaces with their own stores and jobs. Cookie scopes, CORS boundaries, and data segregation follow that split. A guide titled Which hostname does what exists because reviewers and users keep mashing the map into one vague “platform privacy” sentence.
On Search, the standing promise is that queries are not used to build advertising profiles and are not sold to advertisers for marketing. Search still needs ordinary request data to return a page and fight abuse. That is not an ad graph. Outbound result clicks strip referrers so destination sites do not harvest your query string from the Referer header. The Search UI does not load AdSense and does not dress sponsored results as organic ranking. How Search works covers crawl, index, and BM25-shaped ranking if you want the engineering path. This essay is about control.
On AI, prompts and completions are treated as ephemeral for model training purposes: they are not retained to train, fine-tune, or align foundational models. Inference runs over encrypted transport; context buffers are cleared after the completion stream ends, per the AI privacy architecture guide. The AI surface does not load AdSense, and topics explored in prompts are not fed into advertising profile databases. Edge filtering can scrub obvious personal-data patterns and block some injection attempts. You still own the hygiene problem: do not paste production keys, unencrypted private keys, or raw medical records into a chat box. Verify generated code and citations before you rely on them. AI Policies and Safety terms set commercial boundaries.
On Docs and Drive, content is encrypted in transit with TLS 1.3 and at rest with AES-256-GCM according to the cloud security guide. HSTS is enforced. Session cookies use Secure, HttpOnly, and SameSite flags. Sharing uses capability tokens, optional passphrases, expiry windows, and visible roles such as read-only, comment-only, or editor on Docs. Drive is encrypted file storage for documents, photos, and files — personal and team — with live filters for Documents, Spreadsheets, Presentations, folders, and uploaded files. Docs lets you create Document, Spreadsheet, or Presentation items from dashboard cards that use those exact Oernoe labels — not Google Sheets or Google Slides branding.
On Chat, message streams are protected in transit with TLS 1.3. EXIF scrubbing can run on uploaded images so GPS and camera baggage do not travel with a photo. Rooms can take ephemeral retention rules — hours or days, or manual deletion — so a conversation does not have to persist indefinitely. Message payloads are not monitored for targeted marketing.
On Health, notes and metrics stay in a private wellness workspace. The product is an administrative organizer for habits, reminders, and personal records. It is not a medical device and does not replace licensed diagnosis or emergency care. Export exists for personal archiving. Treat Health data as sensitive even when the UI feels casual.
On Account, login, signup, recovery, and security screens do not load advertising scripts, tracking pixels, or social widgets. Session cookies support single sign-on across live product hosts on the oernoe.com family. You can inspect active sessions, enable TOTP two-factor authentication with a standard authenticator app, store sixteen-character backup recovery codes, and request export or deletion. Basic access does not wait on a verification ritual turned into a paywall.
On Tracker, the live product is a personal life tracker — habits, homework, school items, relationship notes, check-ins, focus sessions, insights, and reminders — so privacy here means those personal logs stay in your account store, not in an advertising file, and not mixed into publisher ad inventory.
On www, selected finished educational pages may load Google AdSense with non-personalized ads requested by default. Google may still process page context, cookies or similar identifiers, IP address, browser and device data, and ad interaction data. Ads stay off Home, About, Team, Contact, legal pages, editorial standards, the journal listing, the guides index, auth screens, error pages, and the apps themselves. Search queries typed at search.oernoe.com are not an input to those units. ads.txt names publisher ID pub-9477175344230263. The cookie bar is a notice with Privacy, Cookies, Ads Settings, and OK — not a fake consent wall that blocks reading.
If you still see “zero tracking” as a site-wide promise on a live URL, that URL is wrong. We listed that correction in public because older homepage copy said it while the publisher applied for AdSense.
## Freedom as exit, narrow sharing, and refusal
Freedom, in this house style, means you can use free core tools without a credit card on signup; you can refuse to fill optional profile fields; you can share a document with a narrow permission instead of a permanent public dump; you can export; you can delete. Deletion cannot be undone. We confirm once because people write in a hurry and then want the Drive folder back.
Freedom also means you can read www without an account, and you can run ordinary Search queries without signing in. An account is for product storage and for preferences you chose — files in Drive, documents in Docs, messages in Chat, notes in Health, prompts in AI — not for a hidden advertising dossier inferred from every click.
Freedom does not mean the publisher hostname never loads a third-party ad script. Freedom does not mean Search never sees a query string long enough to answer it. Freedom does not mean a privacy request erases a third-party web page that mentions your name and that Search happened to index. Those are different systems. For ads choices, Google Ads Settings and industry opt-out pages exist. For copyright, DMCA has its own packet. For account data, privacy@oernoe.com and account settings are the path.
Mail is upcoming, not a live How-To product. Maps, Music, Studio, News, and OerAlerts are not live public products either. Freedom includes not being sold a waiting list for software that does not exist. We already replaced a Mail capture form that went nowhere with a status notice that is noindexed and does not load ads.
## Controls you can actually use
Create an account at account.oernoe.com/auth/sign-up if you need product storage. Use a password manager. How-To’s floor is twelve characters with mixed case, digits, and symbols. Longer is better. Enable TOTP when Security settings are available. Store recovery codes offline. Sign out sessions you do not recognize. If you think someone else has the password, change it first, then write support@oernoe.com with timing and browser details — never with the password itself.
In Docs, share by teammate address or by read-only and edit links. Set expiry and passphrase when the share dialog offers them. Export to PDF, Markdown, HTML, or plain text when you want a copy outside the product. Visible permissions matter more than a slogan about collaboration. Distraction-free editing and version history exist so drafting stays usable.
In Drive, organize folders, upload files or directory trees, and create expiring download links with optional passphrase protection and download limits where offered. Inspect storage usage by type and purge trash when you mean permanent delete.
In Chat, start a direct message from New Message, attach within the documented size limits, and set room expiration if you do not want the thread to linger.
In Health, log what you choose, set reminders that stay non-intrusive, and export JSON or CSV copies for your own archive. Do not treat the workspace as clinical advice.
For privacy requests, write from the address on the account to privacy@oernoe.com. Say whether you want an export, a correction, a deletion, or a restriction while a complaint is reviewed. Name the hostnames you used: Search, Health, Chat, AI, Docs, Drive, Tracker, or the publisher site. Do not send a password, a one-time code, or a screenshot of a session cookie. An export is the account record and retrievable content you stored — not every log line we ever saw, and not other people’s data. Search queries are not an advertising profile; do not expect an export to read like a complete diary of every search you typed.
Account deletion through settings or a confirmed privacy request removes the account and attached content from active production systems on the timelines Privacy describes. How-To notes permanent expungement from active databases within thirty days after confirmation. Some truncated security or billing records may remain where law requires. Deletion does not unwind a public third-party page in the Search index, and it does not erase Google’s copy of an ad request from a www article you once opened.
Age rules are ordinary: at least thirteen; under eighteen with a parent or guardian. Support usually answers in one to three working days. There is no chatbot that closes tickets to protect a metric.
## Why publisher honesty is part of privacy
Privacy fails when the company page lies about ads. We applied for Google AdSense on the publisher site. That decision made network-wide “no ads, no cookies, no third parties” language false. The Corrections guide says so without softening. Search still does not use queries as an advertising file. Selected finished www pages may show ads, and Google may process page context and device data on those pages. Keeping both sentences true is the job. Quietly swapping a homepage line without a corrections record would be the other failure mode — the one we refuse.
What we publish is the recovery rule for the journal and guides index: original writing about products we actually run, help pages, and legal record. Thin SEO outlines and “coming soon” stubs do not belong as ads inventory. That publishing rule is privacy-adjacent because a site that invents products also invents trust theater.
## What we will not sell as privacy theater
We will not claim the whole network is ad-free. We will not claim Search queries feed AdSense. We will not call Docs Google Sheets or Google Slides; we describe Document, Spreadsheet, and Presentation as Oernoe labels inside Docs. We will not claim Drive replaces every desktop office tool. We will not invent user counts or “millions of users” hype. We will not treat upcoming Mail as shipped. We will not pretend a privacy request is a memory wipe of the entire internet.
What we will keep saying is smaller and checkable: independent tech, hostname-specific privacy, visible sharing, export and deletion paths, free core access with labeled premium if it appears, and a publisher that funds selected pages without turning Search into an advertising file. That is privacy, freedom, and data control as Oernoe actually runs them — uneven sentences and all. If a control is missing in the product UI, file it as a bug to support@oernoe.com rather than assuming the brochure already promised it.
We are an independent technology company building privacy-first digital services. Anoepal operates the network. Public writing goes out as Oernoe Editorial Team. The point of privacy here is user control of data, sharing, and the freedom to leave — not a fantasy that no request ever touches a log, and not a network-wide claim that nothing is tracked while selected www pages may show Google ads.
## Privacy differs by hostname on purpose
The network is not one blob. www.oernoe.com is a publisher hub. search.oernoe.com is a search engine. account.oernoe.com is identity. chat, ai, docs, drive, health, and tracker are product surfaces with their own stores and jobs. Cookie scopes, CORS boundaries, and data segregation follow that split. A guide titled Which hostname does what exists because reviewers and users keep mashing the map into one vague “platform privacy” sentence.
On Search, the standing promise is that queries are not used to build advertising profiles and are not sold to advertisers for marketing. Search still needs ordinary request data to return a page and fight abuse. That is not an ad graph. Outbound result clicks strip referrers so destination sites do not harvest your query string from the Referer header. The Search UI does not load AdSense and does not dress sponsored results as organic ranking. How Search works covers crawl, index, and BM25-shaped ranking if you want the engineering path. This essay is about control.
On AI, prompts and completions are treated as ephemeral for model training purposes: they are not retained to train, fine-tune, or align foundational models. Inference runs over encrypted transport; context buffers are cleared after the completion stream ends, per the AI privacy architecture guide. The AI surface does not load AdSense, and topics explored in prompts are not fed into advertising profile databases. Edge filtering can scrub obvious personal-data patterns and block some injection attempts. You still own the hygiene problem: do not paste production keys, unencrypted private keys, or raw medical records into a chat box. Verify generated code and citations before you rely on them. AI Policies and Safety terms set commercial boundaries.
On Docs and Drive, content is encrypted in transit with TLS 1.3 and at rest with AES-256-GCM according to the cloud security guide. HSTS is enforced. Session cookies use Secure, HttpOnly, and SameSite flags. Sharing uses capability tokens, optional passphrases, expiry windows, and visible roles such as read-only, comment-only, or editor on Docs. Drive is encrypted file storage for documents, photos, and files — personal and team — with live filters for Documents, Spreadsheets, Presentations, folders, and uploaded files. Docs lets you create Document, Spreadsheet, or Presentation items from dashboard cards that use those exact Oernoe labels — not Google Sheets or Google Slides branding.
On Chat, message streams are protected in transit with TLS 1.3. EXIF scrubbing can run on uploaded images so GPS and camera baggage do not travel with a photo. Rooms can take ephemeral retention rules — hours or days, or manual deletion — so a conversation does not have to persist indefinitely. Message payloads are not monitored for targeted marketing.
On Health, notes and metrics stay in a private wellness workspace. The product is an administrative organizer for habits, reminders, and personal records. It is not a medical device and does not replace licensed diagnosis or emergency care. Export exists for personal archiving. Treat Health data as sensitive even when the UI feels casual.
On Account, login, signup, recovery, and security screens do not load advertising scripts, tracking pixels, or social widgets. Session cookies support single sign-on across live product hosts on the oernoe.com family. You can inspect active sessions, enable TOTP two-factor authentication with a standard authenticator app, store sixteen-character backup recovery codes, and request export or deletion. Basic access does not wait on a verification ritual turned into a paywall.
On Tracker, the live product is a personal life tracker — habits, homework, school items, relationship notes, check-ins, focus sessions, insights, and reminders — so privacy here means those personal logs stay in your account store, not in an advertising file, and not mixed into publisher ad inventory.
On www, selected finished educational pages may load Google AdSense with non-personalized ads requested by default. Google may still process page context, cookies or similar identifiers, IP address, browser and device data, and ad interaction data. Ads stay off Home, About, Team, Contact, legal pages, editorial standards, the journal listing, the guides index, auth screens, error pages, and the apps themselves. Search queries typed at search.oernoe.com are not an input to those units. ads.txt names publisher ID pub-9477175344230263. The cookie bar is a notice with Privacy, Cookies, Ads Settings, and OK — not a fake consent wall that blocks reading.
If you still see “zero tracking” as a site-wide promise on a live URL, that URL is wrong. We listed that correction in public because older homepage copy said it while the publisher applied for AdSense.
## Freedom as exit, narrow sharing, and refusal
Freedom, in this house style, means you can use free core tools without a credit card on signup; you can refuse to fill optional profile fields; you can share a document with a narrow permission instead of a permanent public dump; you can export; you can delete. Deletion cannot be undone. We confirm once because people write in a hurry and then want the Drive folder back.
Freedom also means you can read www without an account, and you can run ordinary Search queries without signing in. An account is for product storage and for preferences you chose — files in Drive, documents in Docs, messages in Chat, notes in Health, prompts in AI — not for a hidden advertising dossier inferred from every click.
Freedom does not mean the publisher hostname never loads a third-party ad script. Freedom does not mean Search never sees a query string long enough to answer it. Freedom does not mean a privacy request erases a third-party web page that mentions your name and that Search happened to index. Those are different systems. For ads choices, Google Ads Settings and industry opt-out pages exist. For copyright, DMCA has its own packet. For account data, privacy@oernoe.com and account settings are the path.
Mail is upcoming, not a live How-To product. Maps, Music, Studio, News, and OerAlerts are not live public products either. Freedom includes not being sold a waiting list for software that does not exist. We already replaced a Mail capture form that went nowhere with a status notice that is noindexed and does not load ads.
## Controls you can actually use
Create an account at account.oernoe.com/auth/sign-up if you need product storage. Use a password manager. How-To’s floor is twelve characters with mixed case, digits, and symbols. Longer is better. Enable TOTP when Security settings are available. Store recovery codes offline. Sign out sessions you do not recognize. If you think someone else has the password, change it first, then write support@oernoe.com with timing and browser details — never with the password itself.
In Docs, share by teammate address or by read-only and edit links. Set expiry and passphrase when the share dialog offers them. Export to PDF, Markdown, HTML, or plain text when you want a copy outside the product. Visible permissions matter more than a slogan about collaboration. Distraction-free editing and version history exist so drafting stays usable.
In Drive, organize folders, upload files or directory trees, and create expiring download links with optional passphrase protection and download limits where offered. Inspect storage usage by type and purge trash when you mean permanent delete.
In Chat, start a direct message from New Message, attach within the documented size limits, and set room expiration if you do not want the thread to linger.
In Health, log what you choose, set reminders that stay non-intrusive, and export JSON or CSV copies for your own archive. Do not treat the workspace as clinical advice.
For privacy requests, write from the address on the account to privacy@oernoe.com. Say whether you want an export, a correction, a deletion, or a restriction while a complaint is reviewed. Name the hostnames you used: Search, Health, Chat, AI, Docs, Drive, Tracker, or the publisher site. Do not send a password, a one-time code, or a screenshot of a session cookie. An export is the account record and retrievable content you stored — not every log line we ever saw, and not other people’s data. Search queries are not an advertising profile; do not expect an export to read like a complete diary of every search you typed.
Account deletion through settings or a confirmed privacy request removes the account and attached content from active production systems on the timelines Privacy describes. How-To notes permanent expungement from active databases within thirty days after confirmation. Some truncated security or billing records may remain where law requires. Deletion does not unwind a public third-party page in the Search index, and it does not erase Google’s copy of an ad request from a www article you once opened.
Age rules are ordinary: at least thirteen; under eighteen with a parent or guardian. Support usually answers in one to three working days. There is no chatbot that closes tickets to protect a metric.
## Why publisher honesty is part of privacy
Privacy fails when the company page lies about ads. We applied for Google AdSense on the publisher site. That decision made network-wide “no ads, no cookies, no third parties” language false. The Corrections guide says so without softening. Search still does not use queries as an advertising file. Selected finished www pages may show ads, and Google may process page context and device data on those pages. Keeping both sentences true is the job. Quietly swapping a homepage line without a corrections record would be the other failure mode — the one we refuse.
What we publish is the recovery rule for the journal and guides index: original writing about products we actually run, help pages, and legal record. Thin SEO outlines and “coming soon” stubs do not belong as ads inventory. That publishing rule is privacy-adjacent because a site that invents products also invents trust theater.
## What we will not sell as privacy theater
We will not claim the whole network is ad-free. We will not claim Search queries feed AdSense. We will not call Docs Google Sheets or Google Slides; we describe Document, Spreadsheet, and Presentation as Oernoe labels inside Docs. We will not claim Drive replaces every desktop office tool. We will not invent user counts or “millions of users” hype. We will not treat upcoming Mail as shipped. We will not pretend a privacy request is a memory wipe of the entire internet.
What we will keep saying is smaller and checkable: independent tech, hostname-specific privacy, visible sharing, export and deletion paths, free core access with labeled premium if it appears, and a publisher that funds selected pages without turning Search into an advertising file. That is privacy, freedom, and data control as Oernoe actually runs them — uneven sentences and all. If a control is missing in the product UI, file it as a bug to support@oernoe.com rather than assuming the brochure already promised it.
Oernoe Editorial Team
Writes for the Oernoe Journal. Questions about this article can go to the contact page.
Get in touchRelated Articles
Want to Learn More?
Explore our complete guides and knowledge base for more insights on privacy, technology, and best practices.
Browse Our Guides