06
Privacy
What this site collects, stated in full. It is a short document, because there is little to state.
RevisionRev. 3Issued2026-08-31
§
In summary
- This site sets no cookies.
- It runs no analytics and no third-party trackers.
- Its fonts are served from this domain, not from anyone else’s.
- The contact form sends your message to us and stores no copy of it.
§ 1
Who is responsible
This site is published by Quantum AI Security LLC, registered in Casper, Wyoming, United States, trading as QAISS. Questions about this document, or any request under it, go to the address at the foot of this page and are answered by a person.
§ 2
What the site itself collects
Nothing. There are no cookies, no local storage, no analytics, no tag managers, no advertising pixels, no session recording, and no embedded third-party scripts or fonts. No consent banner appears here because there is nothing to consent to.
§ 3
The contact form
When you submit the form, what you typed is posted to an endpoint on this domain, turned into an email, and sent to us. It is not written to any database, file or log along the way, and no copy of it is kept anywhere but the mailbox it arrives in. If that endpoint is unreachable, the form falls back to handing the message to your own mail application instead, and tells you it has done so.
§ 4
Limiting abuse of that form
An endpoint that sends mail has to be protected from being used to send a great deal of it. To count submissions we take the connecting IP address, combine it with a secret value and store only the resulting one-way hash together with a number. The address itself is never written down, the hash cannot be turned back into one, and every such record deletes itself within the hour and is held only in the memory of the running service, never on disk. Nothing you typed is stored alongside it.
§ 5
Sending, and who carries the mail
The message is handed by the endpoint to our own mail server, over an encrypted connection, and lands in our mailbox without passing through any email provider or other third party. Email is still not a confidential medium once it leaves a mail server, so treat the form as you would any email: if something genuinely must not travel that way, say so in the message and we will arrange a channel that suits it.
§ 6
Mail you send us
However it reaches us, we hold your message and your address for as long as the conversation is live and for a reasonable period afterwards, so a later exchange has its context. We use it to reply to you and for nothing else: no marketing list, no sale, no transfer to any third party for their own purposes.
§ 7
Hosting, and what our host sees
The site is hosted on infrastructure we own and operate. Requests reach it through Cloudflare, which as a matter of ordinary web operation processes the request — including the visiting IP address — to deliver the page and to protect the service from abuse. Those operational logs are Cloudflare’s and are retained under their terms. We do not receive them, query them, or connect them to anything else.
§ 8
Your rights over what we hold
You may ask what we hold about you, ask for it to be corrected, or ask for it to be deleted, and we will do so within thirty days unless a law requires us to keep it. There is no account to close and no profile to export — in practice the answer is your prior correspondence and nothing else. Ask, and we will tell you plainly.
§ 9
Client systems
Data inside a client’s system is governed by the engagement agreement covering that work, not by this document. Labs publishes reasoning and method; it never publishes a client’s data, architecture, or security mechanisms. See the Labs register for where that boundary sits.
§ 10
Changes to this document
This document is versioned. If what the site collects ever changes, this page changes in the same release, the revision number increments, and the note below records what changed and why. We do not revise it silently.
Requests and questions
Write to the address below with “Privacy” in the subject line.
[email protected]Revision history
- Rev. 3 · 2026-08-31The site and the contact endpoint moved onto infrastructure QAISS owns. § 5 no longer names an email provider: messages go straight to our own mail server. § 4 records that the abuse counters live in memory only. § 7 states where the site is hosted; Cloudflare remains in front of it.
- Rev. 2 · 2026-08-15The contact form now posts to this domain and is sent on via Resend, replacing the mail-client hand-off, which is retained as a fallback. Adds § 4 (abuse limiting, salted-hash IP counters) and § 5 (the sending provider).
- Rev. 1 · 2026-08-15First published. Static site, no collection, mail-client contact form.
That is the whole document. The engineering is the interesting part.
Open a technical conversation