What is real. What is fiction. What we comply with anyway.

§1Fictional concept

Read this carefully before anything else. The entire content of this site — the company, the routes, the people, the protocols, the white paper, the journal, the prices, the testimonials, the partnerships — is invented. It describes a thing that does not exist.

Specifically, the following are fictional and may not be relied upon as factual statements about any real entity, person, place, technology, or service:

• The company "ThroughPortal.com" (as an operator), its founding date, its history.
• The Meridian/9 Oversight Board, its members, its charter, its powers.
• Named individuals — Dr. Iris Vall, Dr. P. Hahn, and any other person referenced.
• The 7 destinations (Helios Anchorage, Quiet Meridian, Pier C Adjacent, Verdant Archive, The Copper Dunes, Lagrange Cathedral, Nocturne Gate) and their classifications.
• Pier C as an operational hub. Northwell Archive as a partner organisation.
• The technology stack — Aperture Engine, return vectors, phase locks, holding actions, the "CB-3" protocol. They are imagined operational vocabulary.
• The pricing tiers (€48k Research, €240k Enterprise, On request Sovereign). Nobody is selling anything.
• The reference codes (TH-WP, TH-JL, TH-GL, TH-HR, TH-CH, TH-PR, TH-LG, OS-2056-04, TR-2055-001, etc.). All invented.
• The incident reports, the testimonials, the press releases. Composed for the design study.

§2Compliance, even though we're fictional

Being a creative project does not exempt the operator from the rules that apply to anyone running a public website. We comply with the following, in good faith and to the best of our ability:

a. Data protection

• GDPR / RGPD — full policy in /privacy.html. We collect the minimum, we publish the legal basis, we honour every data-subject right.
• No tracking, no profiling. No analytics SDK, no ad pixels, no fingerprinting.
• No cookies, therefore no consent banner. localStorage preferences only, on your device.

b. Transparency obligations

• LCEN mentions légales — French law obligation, fulfilled in /terms.html.
• Sitemap and robots.txt — public crawl directives published at the standard paths.
• Versioned source — every change to the site is in a public Git history.

c. Security

• HTTPS only with HSTS max-age 2 years.
• Security headers via Vercel: X-Content-Type-Options: nosniff, Referrer-Policy: strict-origin-when-cross-origin, Permissions-Policy restricting camera/microphone/geolocation/payment.
• No third-party scripts at runtime. Everything served from the same origin.

§3Accessibility statement

This site targets WCAG 2.2 Level AA conformance. It is not externally audited; the publisher self-tests with Lighthouse, Axe, and manual keyboard navigation on every major change.

Current status (last self-test):

• Lighthouse Accessibility 100/100 (mobile + desktop).
• Lighthouse Best Practices 100/100.
• Skip-to-content link, semantic landmarks, ARIA labels on every interactive control.
• Keyboard-only navigation works end-to-end, including the ⌘K command palette, the access modal, and the destination atlas.
• prefers-reduced-motion respected site-wide (portal animations, scroll reveals, Konami glitch, BTC dot all stop).
• Contrast all body text meets WCAG AA on the dark backgrounds.

If you encounter an accessibility barrier, please report it through the access form with the subject A11y and a description of the issue.

§4Live BTC rate is not financial advice

The pricing section shows a live BTC/EUR conversion, refreshed every 5 minutes from CoinGecko. The rate is informational only.

Nothing on this site is an offer to buy or sell Bitcoin or any other asset. Nothing is a recommendation, a solicitation, or financial advice. The publisher is not a registered investment adviser, a payment service provider, or a crypto-asset service provider under MiCA (Regulation (EU) 2023/1114), and no service offered on the site can be paid for in Bitcoin (because no service is offered).

The BTC display exists because it is visually fitting for the fictional company. Treat it as a clock that happens to show a financial number.

§5Responsible disclosure

If you discover a security vulnerability in the site, the form, or the static assets, please report it through the access form with the subject Security.

Acknowledged disclosures will be answered. Coordinated disclosure is preferred; please allow a reasonable time for the issue to be addressed before public disclosure.

Out of scope: vulnerabilities in Vercel, Formspree, CoinGecko, or any other third-party service we depend on — please report those directly to them.

§6Open source & attribution

The site uses no JavaScript framework, no CSS framework, no build system, no analytics SDK. Everything runs on plain HTML, CSS, and vanilla JS, served as static files.

External assets and the licences under which they are used are listed in /terms.html §6 — the five typefaces (Fraunces, Inter, Space Grotesk, JetBrains Mono, Orbitron), the public CoinGecko Demo API, and the Vercel hosting platform.

The site itself is not open source. The original content is © its author. If you want to use the brand kit, see the press kit page for the conditions.