PRIVACY NOTICE · VERSION 2026-07-10

Minimal data, explicit purpose.

Claude Profile Router is a Digital Research Group product created by Robert Moore. This notice explains how information submitted through the landing page is handled when public collection is enabled. Controller address: Not configured for public collection. Claude Profile Router is an independent extension and is not affiliated with Anthropic or Nimbalyst.

At collection: the guide downloads directly in the browser. An address remains unverified for no more than 48 hours; release or installation communication begins only after the address is confirmed. Product marketing also requires the separate, unchecked consent and address confirmation.

Information we collect

We collect the email address you submit, your requested marketing-consent choice, confirmation state, pseudonymous subject and operation identifiers, the consent-notice version, submission time, deletion deadline, and limited security metadata needed to prevent abuse. A changed consent choice replaces the earlier unverified attempt. We do not place this information in Nimbalyst deep links, analytics events, browser storage, or download filenames.

Why we use it

The guide is delivered in the current browser without email verification. After you confirm the address, we use it for the verified listing link, release notes, compatibility notice, and essential installation communication. If you also affirmatively opt in, we may send occasional product updates. Delivery and marketing are separate purposes; declining marketing does not prevent access to the guide.

Legal basis and retention

Release-list delivery is processed to fulfill your confirmed request and our legitimate interest in securely operating the release program. Marketing is based on consent where consent is required. Unverified records expire within 48 hours. A confirmed record carries a deletion deadline of 180 days, and collection fails unless the processor acknowledges each deadline. Suppression records may be retained only as needed to honor withdrawal.

Service providers and transfers

Lead records are delivered to Not configured for public collection in Not configured for public collection under the processor's data processing terms. The processor must queue the confirmation message, keep communication inactive until confirmation, and enforce deletion, withdrawal, suppression, and verified rights requests. Allowlisted, email-free conversion events are delivered to Not configured for public collection in Not configured for public collection under its data processing terms. Local development storage removes expired and malformed records before each write.

Essential cookie and measurement

The form sets one HttpOnly, SameSite=Strict security cookie named cp_csrf. It expires after 30 minutes and protects enrollment and the explicit confirmation POST; opening a confirmation link does not activate communication. Conversion measurement uses closed event-specific value schemas and bounded numbers. It rejects email-shaped values, free-form errors/text, cross-site identifiers, and advertising profiles.

Your choices and rights

You may withdraw marketing consent at any time using the unsubscribe method in a marketing message. Depending on your location, you may also request access, correction, deletion, restriction, portability, or information about processing. Email privacy@example.invalid.

Security and complaints

The form uses transport security in production, same-origin request protection, server validation, abuse throttling, and restricted production delivery. No internet service can guarantee absolute security. You may also complain to your local privacy regulator where applicable.