This policy explains what XecureLogic LLC collects through xecurelogic.com, why, who else handles it, and how long we keep it.
The short version. We collect what you send us through the contact form, plus the limited technical data needed to deliver and protect the site. We use it to reply to you and to keep the site secure. We do not sell or share personal information, we don’t show ads, and we don’t add you to a mailing list. The site sets no cookies.
Who we are
XecureLogic LLC (“XecureLogic,” “we,” “us”) is a security engineering firm based in California. This policy covers xecurelogic.com. It does not cover:
- Client engagements. Those are governed by the signed agreement for each engagement.
- Our repositories on GitHub or any other site we link to. Those sites have their own policies.
- Products in development, such as Kataris, which will have their own terms and privacy information when they launch.
What we collect
Information you send us
When you use the contact form, we collect:
- your name and email address
- your company and organization size, if you provide them
- your message
- the time you submitted the form, and a record that you accepted our Terms of Use and which version you accepted
If you email us directly, we receive whatever your email contains.
Information collected automatically
- Delivery and security. When your browser requests a page from our site, our hosting provider, Cloudflare, receives technical information including your IP address, user agent and the page requested, and processes it to deliver the site and protect it from attacks.
- Bot check on the contact page. The contact form uses Cloudflare Turnstile to tell people from automated traffic. Turnstile processes signals such as your IP address, browser user agent and connection characteristics. It does not read what you type into the form. When you submit the form, we send your IP address to Cloudflare to verify the check and use it to limit how often the same IP address can submit the form.
- Site analytics. We use Cloudflare Web Analytics to see how the site is used overall: page views, referring sites, page load performance, and broad categories such as country, browser and device type. Cloudflare states that Web Analytics uses no cookies or browser storage and does not track individual end users across Cloudflare customers’ websites.
- Network error reports. If your browser fails to load our site, for example because a connection times out, it may send Cloudflare a technical error report. Cloudflare uses these reports to monitor network reliability and states that they contain no personally identifiable information.
We do not include your IP address in contact-form notification emails, and the server code behind the contact form is configured not to retain logs.
How we use it
- to reply to your inquiry and discuss possible work with you
- to protect the site and the contact form from abuse, spam and attacks
- to understand, in aggregate, how people find and use the site
- to keep a record of your acceptance of our Terms of Use
- to comply with legal obligations
We do not use your information for advertising, we do not build profiles of visitors, and we do not send marketing email. After you submit the form, you receive one automated confirmation. Open and click tracking are turned off for that email.
Who we share it with
We do not sell or share personal information, as those terms are defined under California privacy law. We do disclose information to the service providers below so they can operate the site and handle email for us:
| Provider | What it does for us | Policy |
|---|---|---|
| Cloudflare, Inc. | Hosts and protects the site, runs the contact form’s server code, provides the Turnstile bot check and Web Analytics, and hides our email addresses from scrapers. | Cloudflare Privacy Policy |
| Resend | Delivers the contact form’s notification email to us and the confirmation email to you. | Resend Privacy Policy |
| Proton AG | Hosts our mailbox, where your inquiry is stored. | Proton Privacy Policy |
For Turnstile, Cloudflare also acts on its own behalf: it uses Turnstile signals to improve its bot detection. Cloudflare describes this in its Turnstile Privacy Addendum.
We may also disclose information if the law requires it, to protect our rights or the security of the site, or as part of a merger, acquisition or sale of our business. Any transferred information will remain subject to applicable law and to the privacy commitments in effect when the transfer occurs, unless they are lawfully changed.
Cookies and browser storage
The site sets no cookies, and our analytics stores nothing in your browser.
On the contact page only, Cloudflare Turnstile may store a security token in your browser’s local storage, limited to this site. The storage is used as part of Turnstile’s bot-detection process. Some browsers block this storage, and you can clear it at any time through your browser’s site data settings.
Do Not Track and Global Privacy Control
We do not track visitors across other websites or use information for cross-context advertising, so the site works the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.
Cloudflare states that Web Analytics does not track individual end users across its customers’ websites. Turnstile separately processes bot-detection signals, which Cloudflare may use to improve Turnstile across the sites that use it. We do not use any other service intended to collect information about your activity on this site over time and across other websites.
How long we keep it
- Inquiries that don’t lead to an engagement. Every six months, we delete inquiries that are more than 24 months old.
- Inquiries that lead to an engagement. These become part of the engagement record and are kept as that engagement’s agreement and our legal obligations require.
- Email delivery records. Resend retains the content and delivery logs of the emails it sends for us for 30 days.
- Cloudflare. Cloudflare processes delivery, security and analytics data under its own retention practices. Its dashboards show us recent security events and aggregate traffic for limited periods that Cloudflare sets.
Where it’s processed
We are based in the United States. Cloudflare and Resend process information in the United States, and Cloudflare also serves the site from data centers around the world. Proton stores our mailbox on servers in Switzerland, Germany or Norway. If you contact us, your information may be processed in the United States and, depending on the providers involved, in the other locations described above.
How we protect it
The site uses HTTPS and tells browsers to connect only over HTTPS (HSTS). The contact form is protected by a bot check and rate limiting, and our email provider is configured to require encryption (TLS) when delivering form emails. We limit access to inquiries to the people at XecureLogic who need them. No system is perfectly secure. If a security incident triggers a legal notification obligation, we will provide the notice required by applicable law.
Your requests
You can ask us to tell you what information we hold about you, to correct it, or to delete it. Email privacy@xecurelogic.com from the address you used to contact us, so we can confirm the request is yours. We will acknowledge your request within 30 days and respond as soon as reasonably practicable. We may keep information we are required to keep by law or that is part of an engagement record.
Children
This site is intended for businesses and is not directed to children under 13. We do not knowingly collect information from children. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it unless we are legally required to keep it.
Changes to this policy
When we change this policy, we update the effective date at the top of this page. If a change materially affects how we use contact information or inquiry content we already hold, we will notify the people affected by email before applying the change to that information. Other material changes are reflected by updating this page and its effective date.
Contact
Questions or requests about privacy: privacy@xecurelogic.com. Everything else: info@xecurelogic.com.
XecureLogic LLC, California, United States.