Privacy & cookies

At a glance

This informational website offers optional internship-application and investor-inquiry forms, optional first-party site analytics, and a limited advertising program for five substantive research case studies. Analytics is off until you choose to allow it. Google advertising is separately off while the site is under review and until a real ad unit and required consent setup are published. In the meantime, eligible placements show only a clearly labeled, first-party Explore AI recommendation.

Information that may be processed

Information you provide

If you submit a form or email us, we receive your contact details, message contents, attachments, and any other information you choose to include. The form uses your email address as the reply address but does not send an automatic message to you.

For internship inquiries, this may include a résumé or CV, portfolio links, work samples, availability, eligibility information, and other application materials. For investor or strategic-partner inquiries, it may include your organization, role, investment focus, and business contact information. Please do not send sensitive personal data, confidential information, or material nonpublic information unless it is necessary and we have agreed on an appropriate channel.

Basic request and technical information

Our hosting, content-delivery, domain, security-verification, and email-delivery providers may automatically process technical information needed to deliver and secure the site and forms. Depending on their configuration, this can include an IP address, requested URL, date and time, browser or device information, referring page, response status, security-verification signals, and diagnostic logs.

We do not receive every category listed above in every circumstance, and we do not use company-page request logs to build advertising profiles. Infrastructure providers may process an IP address to deliver and secure a request, but our optional analytics record does not store that address.

Optional site analytics

If you choose “Accept,” we collect limited first-party usage events in short batches: page views; active, visible, non-idle page and section time; broad scroll depth; semantic control actions and destination categories; internal page-to-page transitions; media completion milestones; form success or a coarse failure category; and Core Web Vitals. Events contain the canonical page path (never its query or fragment), server and client timestamps, consent version 2026-09-05-v3, language and screen-size buckets, navigation type, a coarse referrer category/source, and only the previous same-origin path where applicable.

After consent, the browser creates random identifiers for this site: a visitor identifier that expires after 90 days, a session identifier that resets after 30 minutes without activity, a new identifier for each page visit, and a one-time identifier that can connect an internal link action to its destination page. Our server replaces these identifiers with source-scoped one-way HMAC values before storage and does not store the browser values. This lets us understand return frequency and ordered journeys only within this site; identifiers are not shared across our other sites. Batches contain at most 24 events and are sent about every 15 seconds or when a page is hidden or closed. Global Privacy Control and a decline create no analytics identifiers, observers, or analytics requests.

This analytics feature does not store a raw IP address or device GPS. Cloudflare may provide approximate network-derived country, region, city, and latitude/longitude; we round coordinates to two decimal places before storage. We do not collect postal code, full URL, query string, fragment, full referrer, raw user-agent string, browser fingerprint, advertising identifier, form contents, keystrokes, pointer coordinates, session replay, email address, or name. Analytics action, section, form, and media labels are stable technical keys, not visible or translated page text.

Optional advertising

The public ads.txt file and AdSense account meta tag identify Explore AI’s Google publisher account so Google can verify site ownership. They do not load an ad, set an advertising cookie, or authorize another seller. Until Google approves the site and we configure a real display-unit slot, the advertising switch remains off and no Google advertising request is made.

If the program is activated after review, Google ads are technically eligible only on the canonical Explore AI domain and only on the adaptive-memory, agentic-exploration, efficient-models, evidence-led-evaluation, and multimodal-science case studies. They are excluded from forms, Careers, Investment, policy and legal pages, interactive pages and product experiences, and every Photon47 company mirror page. Each eligible page has one reserved, clearly labeled placement that does not refresh automatically.

Even after activation, the Google script does not load until you select “Allow optional Google ads” in that placement. If you allow it, Google and its advertising partners may process information such as your IP address, browser or device information, the page URL, consent signals, cookies or similar identifiers where permitted, and ad delivery or interaction data. Whether an ad is personalized, non-personalized, or limited depends on your choices, Google’s published consent flow and account settings, your location, and applicable law. Explore AI does not receive the contents of Google’s advertising profiles.

Third-party vendors, including Google, may use cookies to serve ads based on a visitor’s prior visits to this website or other websites. Google’s advertising cookies enable Google and its partners to serve ads based on visits to this site and other sites on the internet.

You can opt out of personalized Google advertising in Google Ads Settings. You can also review participating companies’ choices at YourAdChoices. Keeping optional advertising off on this site prevents this site from loading the Google advertising client.

If enabled in the publisher account, Google-certified third-party vendors or ad networks may also serve through AdSense. The certified consent flow identifies the vendors that apply to your visit and provides their controls. You can review Google’s current certified third-party vendor information. We will update this notice if the actual vendor configuration changes materially.

Why information is used

• To deliver, maintain, troubleshoot, and protect the website.
• To detect abuse, fraud, security incidents, and technical failures.
• To answer messages and manage potential collaborations.
• To evaluate and administer internship interest, candidate communications, and recruiting processes.
• To respond to investor and strategic-partner inquiries and manage related business communications.
• To comply with applicable law and enforce our terms.
• When you opt in, to understand aggregate page use, content usefulness, and broad geographic reach.
• If you separately allow Google advertising after the program is activated, to fund and evaluate limited advertising on eligible editorial pages.

Where a legal basis is required, processing may rely on our legitimate interests in operating and securing the site, taking steps at your request, compliance with legal obligations, or consent where we specifically ask for it. Mandatory rights under local law remain available.

Cookies and similar technologies

We use local storage to remember your analytics choice and whether you hide the right-edge Privacy shortcut. Only after you opt in, local storage holds random, site-specific visitor and session identifiers and session storage may briefly hold a one-time internal-navigation identifier. The visitor identifier expires after 90 days; the session resets after 30 minutes without activity. The shortcut preference changes only that control’s visibility, not your analytics choice. The analytics choice is not used to enable advertising, and no analytics request is sent before consent. You can change the choice at any time through Data controls in any footer or on this notice. Turning analytics off clears these browser analytics identifiers and stops future events; it does not undo events already recorded.

On an eligible case study, a separate local-storage value remembers whether you allowed optional Google ads or chose the first-party recommendation only. Before Google advertising is configured, no advertising choice or Google identifier is created. After configuration, a decline or Global Privacy Control signal prevents the Google script from loading. Allowing Google advertising can permit Google and its partners to use cookies or similar storage according to the consent message and their policies. Changing back to first-party only reloads a document that has requested Google code, removes the active placement on that new document, and prevents another request from this site; a request already made cannot be recalled.

Cloudflare Turnstile may use strictly necessary storage or similar technology when a form is available to distinguish legitimate submissions from abuse. Hosting and infrastructure providers may also use necessary technology for security, traffic management, or basic service delivery.

The Turnstile widget loads on a form page only after the site confirms that secure form delivery is configured. The analytics interface is first party and does not load an advertising or third-party tracking script. The advertising loader is a separate client and is absent from every non-eligible page.

Sharing and disclosure

Information may be handled by vendors that provide infrastructure, hosting, database storage, domain, bot and abuse prevention, email delivery, or—only after the separate advertising choice—advertising services. Optional analytics events are sent through our Cloudflare Worker to a company-controlled Supabase project. Form submissions are sent to a company-controlled, verified destination address. If enabled and allowed, advertising requests go directly from your browser to Google and its disclosed advertising partners. We may also disclose information when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or support a corporate reorganization or transaction subject to appropriate safeguards.

Explore AI does not directly sell personal information. Some laws may define Google’s advertising processing as a sale, sharing, or targeted advertising even when no money is exchanged for personal information. You may opt out by keeping optional Google advertising off or selecting first-party only. A Global Privacy Control signal keeps both optional analytics and Google advertising off while that signal is active.

External links and separate site experiences

This site links to Discovery, OnlineNIW, Photon47, the founder’s personal website, and third-party websites. When you follow a link, the destination can receive standard request information and applies its own privacy practices. Explore AI Inc. does not control third-party sites.

Discovery is a separate product experience on a separate origin and presents its own privacy notice. Your analytics choice for this company origin is not transferred to Discovery. If you separately opt in there, strictly allowlisted public-page events may be sent to the same company-controlled analytics service and shown under the Discovery source in our private dashboard.

OnlineNIW is also a separate product experience on a separate origin and presents its own privacy notice. Your analytics choice for this company origin is not transferred to OnlineNIW. If you separately opt in there, a minimized copy of strictly allowlisted public-page events may be summarized in the company dashboard while OnlineNIW keeps its operational records in its dedicated environment.

Photon47 is an interactive game experience with its own analytics choice. After a separate opt in, strictly allowlisted Photon47 page views and attributed company-link selections may be sent to the company analytics endpoint. Visiting a mirrored company page on Photon47 is not recorded as a company page view unless the mirror remains open and analytics has been allowed there. Explore AI’s AdSense client is hard-disabled on Photon47 and on its company-page mirror.

Pengcheng Xu’s personal website, also available at explcre.github.io, is a separate experience with its own analytics choice. If separately allowed there, strictly allowlisted public-page events may appear under one Personal site source in the private dashboard; the two hostnames are not counted as separate products.

These product events can be compared as source-level totals, page counts, approximate reach, and independently pseudonymous sessions. We do not reuse a browser identifier between product origins or attempt to determine that visitors on different sites are the same person.

Retention and security

Raw optional-analytics events stop appearing in the dashboard when they reach 30 days and are then deleted by an automated retention task scheduled hourly; if a run is delayed or fails, deletion completes after the next successful run. De-identified daily aggregate counts are deleted on the same schedule after they reach the 25-month boundary. Event identifiers are used for deduplication, and the database is not exposed directly to the browser. Infrastructure providers may maintain security or delivery logs under their own retention schedules.

Other information is kept only as long as reasonably necessary for the purposes described above, including recruiting, investor or partner correspondence, security, dispute resolution, and legal obligations. Candidate and inquiry materials may be retained for a reasonable period to complete the relevant process, document decisions, consider future opportunities where appropriate, and meet legal requirements. You may ask us to delete materials, subject to applicable exceptions. No transmission or storage method is completely secure, but we use measures proportionate to the nature of this site and the information involved.

International processing

The internet services used to deliver this site may process information in more than one country. Where applicable law requires safeguards for international transfers, we and our providers will use recognized transfer mechanisms or other lawful bases.

Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection; to withdraw consent; or to complain to a data-protection authority. These rights are not absolute and may be subject to verification and legal exceptions.

Open data controls to allow, decline, or withdraw optional analytics and to hide or restore the right-edge shortcut. This control does not enable Google advertising.

Use the controls immediately beneath a labeled sponsor placement to allow optional Google ads or return to first-party only. The advertising control appears only after a real Google unit and required consent setup are configured. A Global Privacy Control signal keeps both optional features off. Because analytics events contain no name, email, raw IP address, or persistent account identifier, we may not be able to associate an event with you for an individual access or deletion request.

To make a request, email contact@explore-ai-inc.com with “Privacy request” in the subject line. Please do not send sensitive identification documents unless we ask for a proportionate method of verification.

Children

The company website is intended for a general audience and is not directed to children under 13. We do not knowingly solicit personal information from children through these pages or forms. A parent or guardian who believes a child sent us personal information may contact us to request review and deletion.

Changes and contact

We may update this notice as the website or applicable requirements change. The effective and last-updated dates at the top identify this notice. Material changes will be presented with appropriate notice and, where required, a new consent choice.

For privacy questions, contact Explore AI Inc. at contact@explore-ai-inc.com.