Privacy policy

last updated 1 November 2026

What this site collects

The marketing pages and free tools are static. Tool inputs — tokens, hashes, prefixes — are processed in your browser and never transmitted. There is no analytics script, no session recording, and no advertising pixel on this site.

The web server and CDN keep standard request logs: IP address, user agent, path, and timestamp. These exist for security and abuse handling and are retained for 30 days.

When you email us

Messages to any @rootaxislabs.org address are stored in our mail provider. We keep enquiry threads for two years, and engagement records for the period agreed in the engagement contract.

We do not sell, rent, or share contact details. We do not add you to a mailing list without an explicit request.

Orders

Purchases are processed by a hosted checkout provider that handles card data. We receive the order, your shipping address, and a contact email — not your card number. The provider's own privacy policy applies to the payment step.

Engagement data

Evidence collected during testing is stored encrypted, shared only with the named contacts in the engagement, and destroyed on the agreed date or on request after the report is delivered.

Your rights

Write to privacy@rootaxislabs.org to request a copy of what we hold about you or to have it deleted. We answer within 30 days. If you are in a jurisdiction with additional rights, say so and we will apply them.

Questions about this page: hello@rootaxislabs.org. These policies are written for a US-based sole proprietorship and should be reviewed by counsel before you rely on them.