Privacy policy.

It depends on what you do here. There are four sources.

• Contact form. First name, last name, email address, company (optional), the subject you pick, and your message. The form is delivered to our inbox by email through our own mail relay. We limit submissions per IP address to stop abuse.
• Analytics. Google Analytics 4 records page views, the pages you move between, your browser and device type, and an approximate location derived from your IP address. The cookies it sets are listed in our Cookie Policy.
• Free tools. Vault stores encrypted secrets we cannot read, plus the metadata needed to expire them. The Data Visualizer stores nothing with us. Both are described in the free tools section below.
• Server logs and IP checks. Our hosting provider keeps standard request logs (IP address, browser type, pages requested, timestamps) for security and debugging. Our own code reads your IP address in memory to rate limit the contact form and Vault, and to decide whether to load analytics. Those checks are not stored.

We do not ask for anything else. If you email us directly, we keep that email the way any business keeps its correspondence.

We use what we collect for a short list of reasons.

• To reply to you and keep a record of the conversation.
• To understand how the site is used, which pages matter, and what to improve.
• To keep the site and the tools running safely: rate limits, abuse prevention, debugging.
• To meet a legal obligation, if one arises.

We do not use your information for advertising, and we do not send marketing email. If we ever start a mailing list, it will be opt-in.

We do not sell, trade or rent personal information to anyone.

A small set of vendors process data on our behalf so the site can run:

• Vercel hosts the site and runs its server code.
• Supabase stores Vault ciphertext and supports our admin area.
• Google Analytics processes usage data, as described in our Cookie Policy.
• Our own SMTP mail relay delivers contact form submissions and, if you use it, Vault link emails.

Each vendor receives only what it needs to do its job and is bound by its own contractual confidentiality commitments. Beyond that, we share information only when the law requires it, to protect our rights or safety, or with your permission.

We publish two free tools. Both are designed so your data stays away from us.

Vault. Your secret is encrypted in your browser with AES-256-GCM before anything is sent. The key lives in the part of the link after the # sign, which browsers never send to a server, so we cannot decrypt what you share. Our server stores the ciphertext, the expiry time, the view limit and, if you set a PIN, a hash of it. If you attach files, their names and types are stored unencrypted next to the ciphertext so the recipient can see what is waiting before they reveal it.

Once the view limit is reached, the contents can no longer be retrieved. Expired records are deleted when someone opens the link and by an hourly cleanup job. The longest expiry you can set is one year.

Data Visualizer. Everything runs in your browser. The JSON you paste is parsed and rendered on your device and is never uploaded to us. The tool keeps your last session in local storage in your browser, under the keys visualizer-json, visualizer-config and visualizer-theme-override, so a refresh does not lose your work. Clear site data in your browser to remove it.

• Contact form messages: kept in our email for as long as we need them to handle the conversation and keep normal business records.
• Analytics: kept by Google Analytics for the retention period configured in our account. The related cookies last up to two years, as listed in the Cookie Policy.
• Vault records: deleted when they expire. Once the view limit is used, the contents cannot be retrieved even before that.
• Server logs: retained by our hosting provider for a short period under its own policy.

Wherever you live, we will honor these requests:

• Access: ask what personal information we hold about you.
• Correction: ask us to fix anything that is wrong.
• Deletion: ask us to delete it.
• Opt out of analytics: use your browser controls or the Google opt-out add-on described in our Cookie Policy.
• Object or restrict: tell us to stop or limit a particular use.

Email legal@valiancemedia.com. We may ask you to confirm who you are in a proportionate way, and we aim to reply within 30 days. Depending on where you live, you may also have the right to complain to a data protection authority.

This site is for business owners and the people who work with them. It is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has sent us information, email legal@valiancemedia.com and we will delete it.

We are based in the United States and process information here. If you visit from somewhere else, your information is transferred to and handled in the United States, where privacy laws may differ from those in your country. By using the site you accept that transfer. We apply the same practices to everyone, wherever they are.

When we change this policy we update the date at the top of the page. If a change is significant, we will make it obvious here. Continued use of the site after a change means you accept the updated policy.

Privacy questions and requests: legal@valiancemedia.com. Everything else: hello@valiancemedia.com.

Valiance Media LLC, 21836 N 40th Way, Phoenix, Arizona 85050, United States.