Privacy Policy
Data we collect
Session timestamps, device fingerprints, and interaction paths—standard excavation tools. We don’t store names unless you volunteer them. Payment details? Never. Our analytics resemble carbon dating: impersonal, aggregate, decay-adjusted.
Cookies & analytics
We deploy trackers leaner than a pharaoh’s rations. First-party cookies map your route through the tomb. Third-party tools like Google Analytics measure dwell time on feature explanations. You can disable them, but the site may forget your preferences like a goldfish with amnesia.
Third-party embeds
Some demo loaders pull from Apparat’s vaults. Their security protocols are their own. We vet partners as rigorously as a priest checking for tomb raiders—meaning we glance at their SSL certificates and hope for the best.
Data retention
Logs auto-crumble after 13 lunar cycles. Why 13? Arbitrary as a scarab’s lifespan. Archived backups exist in case of disputes, sealed tighter than a sarcophagus until legal incantations summon them.
Your rights
Request your data—we’ll export it in JSON or hieroglyphics. Object to processing? The option exists, buried under settings. Deletion asks trigger a 7-day grace period in case you’re hallucinating from heatstroke. We comply, but skeptically.
Security
Encryption at rest, TLS in transit, firewalls thicker than pyramid walls. Staff access requires more authentication than a royal burial rite. Breach response? Immediate lockdown—we treat leaks like a breached curse chamber.
Changes & contact
Policy updates post like royal decrees—no fanfare, just chiseled into the footer. Object? Carve your complaint into stone tablets and mail them to our data priestess: compliance@tombkeys.com. Responses arrive faster than a tomb’s silence.