Privacy Policy
Last updated October 24, 2026. This policy applies to www.oriabiostack.com (this website).
Operated by Michael Holaschke DBA Oria BioStack. Contact: hello@oriabiostack.com
1. What we collect
Analytics data — when you visit this site, Google Analytics (GA4) and Microsoft Clarity collect your IP address, browser type, operating system, pages visited, time on page, and interaction events. Microsoft Clarity also records anonymised session replays and heatmaps. This data is collected only if you consent via our cookie banner.
Optional newsletter & email lead capture — if you voluntarily submit your email address to subscribe to The Weekly Dose research briefing or download educational reference sheets, we collect your email address and subscription timestamp so we can deliver those educational updates. You can unsubscribe at any time with a single click or by emailing hello@oriabiostack.com.
No sensitive medical account data on this site — this editorial website does not require you to create a medical account or submit protected health records. Calculator inputs entered into our on-page Reconstitution Calculator run locally in your browser.
2. How we use it
Analytics data is used solely to understand how visitors use the site so we can improve research content and navigation. Voluntarily submitted email addresses are used strictly to send requested educational newsletters and research briefings. We do not sell personal data to third parties or use personal data to train artificial intelligence models.
3. Third-party processors & AI transparency (CA AB 2013)
Hosting & Content Delivery (Netlify) — this website is hosted on Netlify, Inc., which processes standard HTTP request logs (IP address, user agent) for security and content delivery.
Content Management System (Sanity) — editorial articles and newsletter issues are stored and delivered via Sanity CMS.
Database & Transactional Email (Supabase & Resend) — optional newsletter subscriptions and transactional emails are stored and dispatched via Supabase and Resend using encrypted connections.
AI Research Synthesis (Xiaomi MiMo / LLM APIs) & California AB 2013 Disclosure — Oria BioStack uses large language model APIs (including Xiaomi MiMo and frontier LLM providers) to assist our editorial team in synthesizing public scientific literature (such as PubMed abstracts and ClinicalTrials.gov registries). Zero user personal data from this website is used to train, fine-tune, or ground any AI model.
Google Analytics (GA4) — operated by Google LLC. Data may be transferred to and processed in the United States. Google acts as a data processor under our GA4 Data Processing Terms. See Google's privacy policy.
Microsoft Clarity — operated by Microsoft Corporation. Session replay and heatmap data is processed by Microsoft. See Microsoft's privacy statement.
4. Cookies
We use first-party storage (oria-cookie-consent) to remember your consent preference. Analytics cookies (set by Google and Microsoft) are only placed after you accept via the cookie banner.
You can withdraw consent at any time by clearing your browser's local storage or cookies, which will cause the consent banner to reappear on your next visit.
5. Legal basis (GDPR & UK GDPR)
For visitors in the United Kingdom and European Economic Area, our legal basis for analytics processing and optional newsletter subscriptions is your consent (Article 6(1)(a) GDPR / UK GDPR). You may withdraw consent at any time as described above.
6. California residents (CCPA / CPRA)
If you are a California resident, you have the right to opt out of the "sharing" of your personal information (as defined by the CPRA). Our use of Google Analytics and Microsoft Clarity may constitute "sharing" of personal information for cross-context behavioural advertising purposes.
To opt out, click Decline or Opt out on the cookie banner, or email us at hello@oriabiostack.com with the subject "CCPA Opt Out." We do not sell personal information.
7. Your rights
Depending on your jurisdiction (including under UK GDPR, EU GDPR, and CCPA), you have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to or restrict processing
- Data portability
- Lodge a complaint with your national data protection supervisory authority (such as the UK Information Commissioner's Office or your local EU supervisory authority)
To exercise any of these rights, contact us at hello@oriabiostack.com. We will respond within 30 days.
8. Data retention
Analytics data is retained according to the retention settings of Google Analytics (default: 14 months) and Microsoft Clarity (default: 13 months). Newsletter subscription records are retained until you unsubscribe or request deletion.
9. Changes to this policy
We may update this policy. The date at the top of the page reflects the most recent revision. Material changes will be communicated via a notice on this page.