This policy explains what information MySafeInfo collects, why, and what choices you have.
Information we collect
When you use the API or browse the site. Our servers record each request: the IP address it came from, the browser or client (user agent), the URL requested, and the time. We use these logs to operate the service, enforce rate limits, prevent abuse, and understand overall usage.
Browser analytics. Microsoft Azure Application Insights records page views, browser and session identifiers, and diagnostic information. We use this to understand how the site is used and where it fails. These identifiers do not necessarily correspond to distinct people. See our browser storage information for more details.
When you buy a pass. Payments are handled by Stripe. We never see or store your card number; Stripe processes it. From a completed purchase we receive and store your name, email address, the amount, and a transaction reference. Your pass key is tied to your email address so we can find and renew it later.
When you contact us. We receive the name (if provided), email address, topic, and message you submit. Your message passes through our server and Twilio SendGrid to our support inbox so we can respond. We keep correspondence as needed to handle your enquiry and related follow-up. Contact messages are not used for advertising.
Free browser tools
The tools at /tools process your text and selected files on your device. The password generator also creates passwords and passphrases locally using your browser's cryptographic random generator. Tool input, output, and generated passwords are not uploaded to MySafeInfo or sent to Application Insights, and the tools don't put them in cookies. The test data generator remembers your setup in this browser so it's there when you return, and remembers your Data Pass key only if you choose Remember on this device. When you send a result to another tool, it waits in your browser's storage until that tool opens it, and is then deleted. Copying or downloading a result happens on your device.
Loading a tool page still generates ordinary website requests. The request logs and Application Insights usage and diagnostic information described above help us operate and troubleshoot the website; they are separate from the content you process. The tools are free and show no advertising; a Data Pass adds more lists and larger files to the test data generator.
Contributor program
When you send a submission to the contributor program, we receive your email address, your name if you give it, the links and notes you enter, and your choices on the form. The submission reaches us by email through SendGrid, like a contact message. We use it to review your work, reply to you, prevent duplicate rewards, and send your discount code. Applying does not subscribe you to marketing. Asking to be considered for a feature lets us contact you about it; we ask before publishing your name, a link, or any part of your work.
How we use your information
To provide and secure the service, deliver and renew pass keys, send transactional email (your key and expiry reminders), respond to enquiries, prevent abuse, and meet legal obligations. We do not sell your personal information, and we do not use it for advertising.
Who we share it with
We use a small number of service providers that process data on our behalf: Stripe for payments, Twilio SendGrid for email delivery, and Microsoft Azure for hosting, diagnostics, and analytics. A few pages, such as the People page's map, also load content directly from other providers, which receive your browser's request, including your IP address. We may also disclose information if required by law.
Legal bases (EU/UK visitors)
Where the GDPR applies, we rely on: performance of a contract (to provide the pass you bought and deliver your key), our legitimate interests (securing the service, responding to enquiries, and preventing abuse), and legal obligation (tax and accounting records).
Data retention
Request logs are deleted after 90 days. Purchase and key records are kept for as long as your key is valid and as long as we are legally required to keep financial records.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to certain processing. To make a request, contact us. We will respond within the time required by applicable law.
International transfers
Our service is operated from the United States. If you access it from outside the United States, your information will be processed in the United States and other countries where our providers operate.
Children
The service is not directed to children under 16, and we do not knowingly collect their personal information.
Changes
We may update this policy from time to time. The date above shows when it last changed.
Contact
Questions about privacy: contact us.