Pewter Privacy Policy
Effective date: [CONFIRM: date of publication]
This policy explains what personal data we collect when you use Pewter, why we collect it, who we share it with, how long we keep it, and what rights you have. We have tried to keep it plain and short.
To manage or delete your data, see Your privacy choices at https://omegacompute.com/privacy-choices.
1. Who we are
The company responsible for your personal data (the "controller") is HEIR PTE. LTD. (UEN 202449113D), a company registered in Singapore. We do business as Omega Compute. In this policy, "we" and "us" mean HEIR PTE. LTD.
- Registered office: 32 Pekin Street, #05-01, Singapore 048762
- Contact for all privacy matters: devs@h3ir.com
- Data Protection Officer under the Singapore Personal Data Protection Act (PDPA): Adhitya, reachable at devs@h3ir.com
- United States contact: [COUNSEL: a US contact or agent, if counsel says one is needed. None is appointed. Until then, United States users write to devs@h3ir.com.]
"Pewter" means the Pewter iPhone app, the Pewter servers and programming interfaces it connects to, and the website at omegacompute.com. This policy covers all three.
2. Pewter is a sandbox for now
Pewter deals use test money. Balances, deal amounts, fees and payouts for Pewter deals are sandbox figures. No real funds move through a Pewter deal. Many figures in the sandbox, such as delivery and uptime, are simulated, and the other side of a sandbox deal may be a scripted counterparty run by us.
Referrals, levels, badges and the Daily Forge carry no money. Referral rewards are points only, and points, levels, badges, packs and Forge items have no cash value. See the Referral Program Rules, the Levels and badges rules, the Daily Forge rules and the Wallet disclosure.
The Pewter wallet does not change this. The wallet is non-custodial: it lives on your phone, and we never hold your key or your funds. By default it uses a test network. The app can also show a view-only Mainnet view of your real USDC balance, but no Pewter deal settles on Mainnet. See section 9.
In-app purchases go through Apple. If you buy a subscription or boosts in the app, Apple takes the payment. We do not receive your card or bank details. [CONFIRM: keep this paragraph only if the in-app purchase build ships; counsel's 27 October 2026 email says in-app purchase of Pro, Foundry and the boosts is in the United States launch.]
If we ever offer live services that involve real money or real compute, we will update this policy before we start collecting any new kinds of data. That would include identity checks, payment details and sanctions screening.
3. The data we collect
Data you give us or that Apple gives us when you sign in
Sign in with Apple is the only way to sign in. We receive:
- Apple user identifier. A stable ID that Apple creates for you and for Pewter only. We use it to recognise your account.
- Email address, only if you share it. If you choose Hide My Email, this is an Apple private relay address, not your real email address.
- Your name, only if you choose to share it the first time you sign in. We keep it privately and never show it to other users.
- Apple's "real user" signal, which tells us whether Apple thinks you are a real person, if your device sends it.
- Authorisation tokens from Apple. We use them only to confirm that you are you and, when you delete your account, to tell Apple to revoke Pewter's access. We store these tokens in encrypted form.
Data created when you use Pewter
- Device data. A random identifier that the app creates and stores on your device, the device name that your device reports (which may contain your name, such as "Sam's iPhone"), the app version, and, if your device sends it, the country or region.
- Session data. Records of your sign-ins and sessions, so we can keep you signed in and end sessions when needed. Sessions expire after 30 days of not being used, and at most after 90 days.
- Account and activity data. Your listings, requests and offers, deals, terms you propose or accept, saved filters and preferences, approvals and the decisions you make, your agents (names, mandates and limits, and the keys we issue to them), your sandbox ledger entries, and an audit log of actions taken in your account. If you describe what you need in your own words, we keep that text with the request. The alias that other users see (for example "Buyer-1234") is created by us and is not your name.
- Location of your machine (sellers only). The country, region and city of a machine you offer. You can pick these by hand. Or the app can ask once for your location while you use it, to fill them in. We never save or send your exact position. See section 15.
- Referral data. Your referral code, the code you used to join (if any), when someone you invited finished setup, and the points you earned. You see the people you invited only under an alias. The person you invited is not told who invited them.
- Wallet data. If you link a wallet, we store its public address, the network, whether you created it in the app, imported it or added it to watch only, and a history of addresses you replaced or removed. We never receive your private key or recovery phrase. See section 9.
- Purchase data. If you buy a subscription or boosts in the app, Apple sends us the transaction record and renewal information. We tie it to your account with a random account token, so we can check what you bought and give you access. We also keep a record of your boosts and when you used them. We receive no card or payment details. [CONFIRM: keep only if the in-app purchase build ships.]
- How you use features in the app. Your swipes on the buyer stack, Daily Forge claims and streaks, pack openings, items you equip, and achievements. For the Daily Forge, we also keep the time zone your device reports, so we know when your day starts.
- Job and workload metadata. If you submit jobs or workloads, we process information about them, such as when they ran, how long, and what resources they used. See section 6 for the content of workloads.
- Technical logs. IP address, time, request ID, and the type of request made to our servers. We use these for security and to find and stop abuse.
- Support messages. What you send to devs@h3ir.com and our replies, including your email address and anything you choose to tell us. Support is by email only. The app has a plain email link and no in-app support chat.
Data from your use of the website
When you visit omegacompute.com, our servers and our network provider receive your IP address, browser details, and the page you asked for. The website does not set cookies of its own and does not use analytics or advertising tools. See section 12.
What we do not collect
We do not collect payment card data, bank account details, precise location, contacts, photos or videos, audio, health data, sensitive information, your browsing or search history, or advertising identifiers. We never receive your wallet's private key or recovery phrase. Face ID is handled by iOS on your device. We never receive your face data or fingerprint. We do not use third-party analytics or advertising tools in the app. We do not buy data from or sell data to data brokers. We do not track you across other companies' apps or websites.
4. Why we use your data and our legal bases
| What we do | Why | Legal basis (GDPR Article 6) and PDPA concept |
|---|---|---|
| Sign you in, keep you signed in, create and run your sandbox account, show your balance, listings, requests, deals and approvals | To provide Pewter to you | Contract (Art. 6(1)(b)). Under the PDPA: you consent by using Pewter, and we collect only what is needed to provide it |
| Link your public wallet address and show your wallet in the app | To provide the wallet feature you chose to use | Contract (Art. 6(1)(b)). Under the PDPA: consent by using the feature |
| Fill in your machine's country, region and city from your location | To save you typing it | Consent (Art. 6(1)(a)), given through the iOS permission prompt. You can say no and pick by hand |
| Check your in-app purchases and give you what you bought | To provide subscriptions and boosts | Contract (Art. 6(1)(b)) |
| Run the Daily Forge, streaks, packs and achievements | To provide these features | Contract (Art. 6(1)(b)) |
| Show you to other users only as an alias | To keep identities private | Contract (Art. 6(1)(b)) |
| Keep Pewter secure, find and stop abuse and fraud, limit request rates, debug problems, keep audit logs | To protect you, other users and us | Legitimate interests (Art. 6(1)(f)). Under the PDPA: legitimate interests, and a reasonable purpose |
| Check that Pewter is not being used in breach of sanctions or export-control rules, and respond to lawful requests from authorities | To follow the law | Legal obligation (Art. 6(1)(c)) and, where no obligation applies, legitimate interests (Art. 6(1)(f)). Under the PDPA: required or authorised by law |
| Answer your support messages | To help you | Contract (Art. 6(1)(b)) or legitimate interests (Art. 6(1)(f)) |
| Keep and improve Pewter, fix errors, and test new features | To make Pewter work better | Legitimate interests (Art. 6(1)(f)). Under the PDPA: legitimate interests |
| Use your name, only if you choose to share it | To personalise greetings and to identify your account if you contact us | Consent (Art. 6(1)(a)). You can withdraw it at any time |
| Keep records for legal claims, accounts and audits | To protect our legal position and meet our duties | Legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)) |
We do not sell your personal data. We do not use it for advertising. We do not use it to build profiles to show you adverts.
Where we rely on legitimate interests, we have weighed them against your rights. You can ask us for more detail about this by writing to devs@h3ir.com.
5. Other users see only an alias
Other users see you only under an alias such as "Buyer-1234" or "Seller-5678". Your name, email and account details are not shown to them. This privacy between users does not apply to us or to authorities. We know who our users are, and we may disclose information where the law requires it.
6. Workloads that pass through our gateway
Today, Pewter does not run real customer workloads. Jobs, uptime, and delivery figures in the sandbox are simulated.
If we offer live services, you may send a workload through our gateway to compute capacity run by a third-party provider. For the content of those workloads (the data you send, the code you run, and the results), our role will be a processor. This means we handle that content on your behalf and on your instructions. You or your company will be the controller. We will offer business customers a data processing agreement for this. Our approach is:
- Minimal handling by us. We do not log the content of workloads. We keep only metadata about each job. If we offer a temporary staging area for files, we will tell you how long files stay there. The planned default is 7 days after a job ends.
- Short retention of job logs. We plan to keep job logs for 7 days.
- Scratch storage is destroyed. Temporary storage for a job is destroyed when the job ends.
- Providers are sub-processors. Third-party providers who run your workload can reach it while it runs. On ordinary hosts, we cannot prevent a provider from seeing data that runs on its machine, and we cannot prove that a provider has wiped a disk. For this reason, you must not put personal data in a workload on standard capacity unless we have agreed this in writing.
- Provider data. When you offer a machine, we keep the country, region and city you give for it (see section 3). We never keep its exact position. If a provider connects a machine for live services, we also process information about the machine, such as its IP address, hostname, hardware details and uptime. These can be personal data. We keep raw heartbeats for 14 days.
7. Who we share data with
We share personal data only with the following, and only as needed:
| Recipient | What they do | Data involved |
|---|---|---|
| Apple | Verifies Sign in with Apple, provides the private relay email, and revokes Pewter's access on request or when you delete your account. Apple also runs the App Store and TestFlight, takes payment for in-app purchases and sends us purchase records, and is a separate controller for its own data | Apple user identifier, authorisation tokens, email relay data, in-app purchase records |
| Railway (hosting and database provider) | Hosts the Pewter servers and the database, as our processor | All data described in section 3 that is stored on our servers |
| Cloudflare (network and security provider) | Delivers and protects traffic to our website and some of our servers, as our processor | IP address, request details |
| Blockchain network services (wallet only) | When the app shows your wallet balance, your phone asks a public network service for it directly. That service sees your public address and your IP address. [CONFIRM: name the services, e.g. the public Base and Base Sepolia endpoints the server lists] | Public wallet address, IP address |
| Google Fonts (website only) | Provides the typeface that the website displays. Your browser asks Google for it, so Google receives your IP address and browser details | IP address, browser details |
| Our email provider | Delivers and stores email sent to and from devs@h3ir.com | Support messages, your email address |
| Professional advisers, insurers, and acquirers | Legal, accounting and similar advice; or a buyer of our business, who would be bound to treat your data as set out here | Only what is needed |
| Authorities and courts | Where the law requires it or to protect legal rights | Only what is needed |
| Third-party providers of compute and other users | Only when live services are offered. Providers receive what they need to run a job, not your account details. Other users see your alias only | See section 6 |
We do not share personal data for advertising. If we add a new recipient (such as a payment, bank or identity-check partner for live services), we will update this policy first.
8. Transfers of personal data abroad
We are based in Singapore. Our service providers may process data in other countries, including the United States. Singapore is not on the European Commission's list of countries with an adequacy decision, and some providers are in countries that are not on it either.
When we transfer personal data out of the European Economic Area, the United Kingdom, or Singapore, we make sure it stays protected. We use one or more of the following, depending on the case: an adequacy decision, the European Commission's standard contractual clauses (with the UK addendum where needed), contract terms that bind the recipient to a standard of protection comparable to the PDPA, or another transfer tool that the law recognises. You can ask for a copy of the safeguards that apply by writing to devs@h3ir.com.
9. How long we keep data
| Data | How long |
|---|---|
| Account details (Apple user identifier, relay email, name, display alias) | While your account is open. When you delete your account, we delete these or replace them with irreversible pseudonyms straight away |
| Session records | Until the session ends. Sessions end after 30 days of not being used, and at most after 90 days, or when you sign out or delete your account |
| Sandbox activity (listings, requests, offers, deals, approvals, ledger entries, agents, audit log) | While your account is open. When you delete your account, personal details in them are replaced with irreversible pseudonyms. The audit log then keeps only hashes. We may keep the pseudonymised records so that service history stays intact |
| Machine location (country, region, city) | While the listing or your account exists. When you delete your account, it is deleted or pseudonymised with your other sandbox activity [CONFIRM: engineering to confirm] |
| Wallet address records | While the address is linked. If you remove or replace an address, it stays in your address history until you delete your account. When you delete your account, we delete or unlink your addresses in our records, except where we must keep them by law [CONFIRM: API notes say deletion "purges" addresses; confirm purge vs unlink] |
| In-app purchase records and boost history | [CONFIRM: retention period, e.g. while your account is open and then as long as accounting and tax law require] |
| Daily Forge, streaks, packs and achievements | While your account is open. When you delete your account, we delete your Forge profile (including your time zone). The claim history keeps only a pseudonymous ID, dates, tiers and item IDs, with no name and no time zone |
| Server logs (IP address, time, request ID) | 90 days |
| Support messages | 12 months after we close the conversation |
| Node heartbeats from providers (live services only) | 14 days |
| Uptime measurements (live services only) | 13 months |
| Job logs (live services only) | 7 days |
| Ledger, payment-release and audit records of real money (live services only) | 7 years, because accounting and tax law require it |
| Records kept to meet a legal duty or to handle a legal claim | As long as the duty or claim lasts |
Your wallet and the public blockchain
- The wallet is non-custodial. The Pewter wallet lives on your phone. You can create a wallet in the app, import one you already have, or add an address to watch only.
- We never hold your key or your funds. Your private key and recovery phrase stay on your device. We never receive them. We do not hold, receive, move, freeze or redirect your USDC, and we cannot recover a lost key. If you lose your key and your backup, nobody, including us, can get your funds back.
- Our server stores only your public address. It also stores the network, how you added the address, and the history described in the table above.
- We refuse secrets. Our server checks what the app sends. Anything that looks like a private key or a recovery phrase is rejected before it is stored or logged. We will never ask you for your recovery phrase or private key. If anyone does in our name, it is not us.
- Sandbox and Mainnet. By default, the wallet uses Base Sepolia, a test network. Test USDC there has no value. The app can also show a Mainnet view on the Base network. That view is view-only. It can show your address, your USDC balance, a QR code for receiving, and a way to export your key. Your phone reads the balance directly from the network.
- Settlement is sandbox for now. Pewter deals, fees and payouts settle only in the sandbox, with test money. No Pewter deal settles on Mainnet, whatever the app shows.
- A wallet address is personal data. Once it is linked to your account, we treat it as personal data, even though it looks like a string of letters and numbers.
- Removing a wallet or deleting your account. When you remove a wallet address, or delete your account, we unlink the address from your account in our records, as set out in the table above. This does not touch the wallet on your phone or any funds in it. Back up your key before you delete the app or your account. [CONFIRM: whether deleting the account also removes the wallet from the phone]
- We cannot erase anything from a public blockchain. Transactions to or from your address are recorded on a public blockchain run by other people, not by us. Anyone can see them, and nobody, including us, can change or delete them. This stays true after you delete your account.
- Think before you link a wallet. Use an address that you are comfortable having linked to your Pewter account.
If you hold a live deal that is still open, we cannot finish deleting your account until the deal ends. Sandbox deals never block deletion. If you ask us to delete data that we must keep by law, we will tell you what we are keeping and why.
10. How we protect your data
We use measures that are suited to the risk. Right now, they include:
- encryption of data in transit between the app and our servers (HTTPS);
- the iOS Keychain for session tokens on your device;
- short-lived access tokens, refresh tokens that stop working once used, and detection of reused or stolen tokens;
- Apple tokens stored in encrypted form;
- approvals that you can confirm with Face ID or your device passcode;
- a server check that rejects wallet keys and recovery phrases before they are stored or logged;
- limits on the rate of requests, and limits on who in our team can reach personal data; and
- separation of sandbox data from any live data.
No system is perfectly secure, and we cannot promise that Pewter is. If you think your account has been compromised, tell us at devs@h3ir.com.
If there is a personal data breach that must be reported, we will tell the competent authority within the time that the law sets. Under the GDPR, this is within 72 hours of becoming aware of it. Under the PDPA, it is within 3 calendar days after we assess that the breach is notifiable. We will tell you without undue delay if the breach is likely to cause you serious harm or risk.
11. Your rights
Everyone
You may ask us at any time to tell you what personal data we hold about you, to correct it, or to delete it. You may also withdraw any consent you gave us.
If you are in the EU, the European Economic Area or the United Kingdom (GDPR)
You have the right to:
- access your data and get a copy (Article 15);
- correct data that is wrong or incomplete (Article 16);
- erase your data in certain cases (Article 17). This right cannot reach data on a public blockchain (see section 9);
- restrict how we use your data in certain cases (Article 18);
- be told when we have passed on a correction, erasure or restriction (Article 19);
- receive your data in a portable format and ask us to send it to another provider where this applies (Article 20);
- object to our use of your data that is based on legitimate interests (Article 21); and
- not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you (Article 22). We do not make such decisions (see section 14).
Where we rely on your consent, you may withdraw it at any time. This does not affect what we did before.
If you are in Singapore (PDPA)
You can ask us for access to your personal data and for information about how we have used or disclosed it in the past year. You can ask us to correct it. You can withdraw your consent to our collecting, using or disclosing your personal data. If you do, we will tell you what this means for what you can do with Pewter. For example, we cannot run your account without your Apple identifier.
If you are in California (CCPA and CPRA)
[COUNSEL: confirm the US state privacy-law wording (California and other states) for a Singapore company with US users.] If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to us, you have the right to know what personal information we collect, use and disclose, to ask us to delete or correct it, to opt out of the sale or sharing of your personal information, and to limit the use of sensitive personal information. You will not be treated worse for using these rights. We do not sell your personal information. We do not share it for cross-context behavioural advertising. Over the last 12 months we have not done either.
How to use your rights
Our privacy choices page explains each option step by step: https://omegacompute.com/privacy-choices.
- In the app: More > Settings > Delete account, to delete your account.
- By email: write to devs@h3ir.com from the email address we hold for you, say which right you want to use, and tell us enough to find your account. We may ask you to confirm who you are before we act. If you used Hide My Email, tell us the relay address.
- Agents: you may use an authorised agent to ask for you, if you give us proof that they may.
- Time to reply: we will reply within 30 days. If your request is complex and we need more time, we will tell you within that period and why. For California requests, the time limit is 45 days, which we may extend once by a further 45 days where permitted.
- Cost: it is free, unless a request is clearly unfounded or excessive. If so, we may charge a reasonable fee or refuse, and we will tell you why.
Complaints
We would like the chance to fix a concern first, so please write to devs@h3ir.com. You also have the right to complain to a data protection authority at any time.
- Singapore: the Personal Data Protection Commission (PDPC), https://www.pdpc.gov.sg.
- EU and EEA: the data protection authority in the country where you live, work, or where you believe a breach happened. You can find yours at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.
- United Kingdom: the Information Commissioner's Office (ICO), https://ico.org.uk.
- California: the California Attorney General and the California Privacy Protection Agency.
12. The website, cookies and analytics
The website at omegacompute.com does not set cookies of its own. It does not use analytics tools, advertising tools, social-media pixels, or tracking scripts. The website has no accounts, no web forms and no web tool for deleting data. To delete your account, use the app or email us (see https://omegacompute.com/privacy-choices).
Two outside services are involved when you visit it:
- Cloudflare delivers and protects the website. It receives your IP address and request details. It may set or read technical security data to do this.
- Google Fonts. Your browser asks Google for the typeface that the website uses. Google receives your IP address and browser details. [CONFIRM: delete this point if the font files are self-hosted before publishing]
The website links to our page on X (x.com). If you follow the link, X's own policies apply.
If we add analytics or cookies later, we will update this policy and ask for your consent first where the law requires it.
13. Children
Pewter is for business use and is not for anyone under 18. [COUNSEL: the App Store age rating drafted for the US listing is 4+, which does not match "not for anyone under 18". Counsel decides which is right; the US children's-privacy position (COPPA and state laws) follows from it.] We do not knowingly collect data from children. If you think a child has given us personal data, write to devs@h3ir.com and we will delete it.
14. Automated decisions
We do not make decisions about you that are based only on automated processing and that have legal or similarly significant effects on you. We use automated security controls, such as request rate limits and ending sessions when we detect a stolen token. These do not have such effects. In the sandbox, an automated, scripted counterparty can respond to your test requests. This only affects test data.
If we add checks for live services that could lead to a person being refused access, such as sanctions screening, we will tell you, and a person will review any automated result before a refusal.
15. Apple: App Store privacy details
This section matches the privacy details we give to Apple for the Pewter app.
Tracking: none. Pewter does not track you across other companies' apps or websites. It does not use advertising identifiers. It contains no advertising or analytics tools from other companies. We do not buy data from or sell data to data brokers.
| Apple category | Data type | What it means in Pewter | Linked to you | Used for | Used for tracking |
|---|---|---|---|---|---|
| Contact Info | Name | Your name, only if you share it through Sign in with Apple | Yes | App functionality | No |
| Contact Info | Email Address | Your email, only if you share it. It may be an Apple private relay address | Yes | App functionality | No |
| Identifiers | User ID | Your Apple user identifier and your Pewter account ID | Yes | App functionality | No |
| Identifiers | Device ID | A random ID the app creates and stores on your device, and your device name | Yes | App functionality | No |
| Financial Info | Other Financial Info | Your public wallet address, deal amounts, and the funded balance shown in your account [CONFIRM: define "funded balance"] | Yes | App functionality | No |
| Location | Coarse Location | The country, region and city of a seller's machine | Yes | App functionality | No |
| User Content | Other User Content | Listings, requests, deal terms, saved filters, approvals and agents | Yes | App functionality | No |
| Purchases | Purchase History | Apple transaction records and renewal information for subscriptions and boosts | Yes | App functionality | No |
| Usage Data | Product Interaction | Swipes on the buyer stack, Daily Forge claims, streaks, pack openings and achievements | Yes | App functionality | No |
Not collected: precise location, contacts, photos or videos, audio, health and fitness data, sensitive information, browsing history, search history, advertising data, environment scanning, customer support data in the app, and payment card or bank details. Support is a plain email link to devs@h3ir.com. Apple handles billing for in-app purchases. We receive no card or payment details.
Location. Pewter asks for your location only while you use the app, and only once. The prompt says: "Pewter uses your location once, only to fill in the country, region and city of your machine. Your exact position is never saved or sent." You can say no and pick the country, region and city by hand. You can change the permission at any time in iOS Settings.
Wallet. Pewter never holds your wallet's key or your funds. Our server stores only your public wallet address. See section 9.
Sign in with Apple. Sign in with Apple is the only way to sign in. We receive your Apple user identifier, and an email address and name only if you share them. The email may be a private relay address from Apple.
Delete your account. You can delete your account in the app: More > Settings > Delete account. You will be asked to sign in with Apple again, so we can prove that the request comes from you. We then end all your sessions, tell Apple to revoke Pewter's access to your Apple Account, and replace your personal details with irreversible pseudonyms. Audit records keep only hashes. If you cannot reach Apple's revocation, the deletion still completes. You can also remove Pewter yourself in Settings > your name > Sign in with Apple [CONFIRM: exact iOS menu path on current iOS]. If you remove Pewter there, Apple can tell us. When we get that notice, we end your sessions and erase your account, subject to section 9. Deleting your account does not delete the wallet on your phone, and it does not cancel a subscription you bought through Apple. You manage subscriptions in your Apple Account settings. [CONFIRM: both points against the shipped build]
Face ID. Face ID is handled only by iOS. We never receive biometric data.
16. Representative in the EU and the UK
We have not appointed a representative in the European Union or the United Kingdom. If you are in the EU, the EEA or the UK, you can contact us directly about anything in this policy at devs@h3ir.com.
17. Changes to this policy
We will post any change at https://omegacompute.com/policy with a new effective date. If a change is material, we will tell you in the app, or by email to the address we hold for you, before it takes effect. We will not use your data for a new purpose without telling you first and, where the law requires, asking for your consent. Your current choices are always at https://omegacompute.com/privacy-choices.
18. Contact
HEIR PTE. LTD., doing business as Omega Compute
Registered office: 32 Pekin Street, #05-01, Singapore 048762
Email for privacy requests, questions and complaints: devs@h3ir.com
Data Protection Officer (PDPA): Adhitya, at the same address
United States contact: [COUNSEL: a US contact or agent, if counsel says one is needed. None is appointed. Until then, United States users write to devs@h3ir.com.]