Privacy Notice
What this website collects, why, and who it reaches.
- 01.1
What this site collects
You are identified to us in exactly one place: the access request form. The fields are your name, your organisation, your work email address, and an optional description of your intended use case.
Separately, and without identifying you, we measure how the site is used: which pages and sections are read, for how long, and what is clicked. The next clause sets out exactly how that works and what is deliberately not kept.
There is no account system, no comment facility, and no user-generated content.
- 01.2
Measurement, without cookies or third parties
This site sets no cookies. It loads no third-party analytics, no advertising or marketing scripts, no tracking pixels, and no session recording. Nothing on this site can correlate your visit here with your activity anywhere else, because no external service ever sees it.
We do measure how the site itself is used, with our own software, on our own infrastructure. We record which pages are opened, which sections are on screen and for how long, how far down a page you scroll, and which links and buttons are clicked. This tells us which explanations are working. It is not connected to you.
Continuity within a single visit comes from a random identifier held in your browser's sessionStorage, which is scoped to one tab and discarded when you close it. To count distinct visitors we keep a keyed hash derived from your IP address and browser, re-salted every day; your IP address and browser string are used to compute it and are never written down. Because the salt changes daily, the same person returning tomorrow is a new number to us, and the records cannot be used to follow anyone over time.
We do not record anything you type. Form fields are excluded from measurement by design, so the name, organisation and email address you enter in an access request are never captured as analytics.
If your browser sends Global Privacy Control or Do Not Track, this site collects nothing at all.
- 01.3
How a request reaches us
When you submit the access form, its contents are transmitted to our hosting provider's serverless function and delivered to us as an email through Resend, our transactional email provider. Resend processes the message in order to deliver it and acts as a processor on our behalf.
Standard server request logs generated by our hosting provider may include your IP address and user agent for operational security purposes.
- 01.4
Why we hold it
We use what you send in an access request solely to evaluate and respond to it, and to correspond with you about it.
We use the measurement described above solely to understand which parts of this site are useful and where our explanations fail, so that we can improve them. It is never used to make a decision about any individual, and it is not combined with access requests. Where the law requires a basis for this processing, we rely on our legitimate interest in understanding how our own website performs, an interest we have deliberately pursued in the least intrusive way available to us.
We do not sell personal data, we do not share it with advertisers, and we do not use it to train models.
- 01.5
How long we keep it
Access requests are retained for retention period to be set and then deleted. Where a request leads to a commercial relationship, correspondence is retained under the relevant agreement instead.
Measurement records are retained for analytics retention period to be set and then deleted. They contain no contact details and no identifier that survives the day it was created.
- 01.6
Your rights
Subject to the law applying to you, you may request access to the personal data we hold about you, ask us to correct or erase it, object to or restrict our processing, and request a copy in portable form. You may also complain to your supervisory authority.
To exercise any of these, write to syed@sigilith.com. We will respond within the period required by applicable law.
- 01.7
Controller and jurisdiction
The controller for this processing is Sigilith, Inc., a Delaware corporation (registered address). This notice is governed by governing law.
- 01.8
Changes
Material changes are published here as a new version with a new effective date. The version and date at the head of this notice identify the text currently in force.