Privacy Policy
Arcandel is a cybersecurity-awareness company, and this site practices what it teaches: no cookies, no analytics, no advertising, no trackers. The only personal data this website can collect is an email address you choose to give us.
1. Scope
This policy covers the Arcandel website (arcandel.com), operated by Arcandel, LLC. Our products carry their own policies tailored to what they actually do — the Aerye app is governed by the Aerye Privacy Policy. Where this page and a product policy overlap, the product policy controls for that product.
2. The Website
Browsing this site collects nothing about you. Specifically:
- No cookies — not for tracking, not for analytics, not at all.
- No analytics or measurement scripts of any kind.
- No advertising, no advertising identifiers, no fingerprinting.
- No third-party embeds: fonts, images, and video are all served from our own domain, so visiting this site does not announce your visit to anyone else.
- Like every website, our hosting infrastructure transiently processes your IP address to deliver pages, and keeps standard short-lived server logs for security and abuse prevention. We do not use them to identify or profile visitors.
3. The Waitlist
If you join the Aerye waitlist, we store exactly three things: your email address, which form you used, and when you joined. We deliberately do not store your IP address or browser details with it. The list lives in our backend (hosted on Supabase, in the United States) in storage that is locked so that only our own server-side function can access it — nothing client-side can read the list.
We use it for one purpose: contacting you about Aerye’s launch and early access. It is never sold, shared, or used for anything else. To be removed at any time, email privacy@arcandel.com from the address you signed up with.
4. If You Email Us
Emails you send us (hello@, privacy@, legal@, security@) are kept as ordinary correspondence for as long as needed to handle the matter, then routinely deleted. We do not add correspondents to any mailing list.
5. Our Products
Every Arcandel product follows the same principles: local-first wherever possible, minimal collection tied to features you actually use, no advertising, no tracking SDKs, and no selling of user data — ever. Each product documents its own specifics; see the Aerye Privacy Policy for the app.
6. How We Use Data
To serve the website, to send the launch communications you asked for, to answer messages you send us, and to keep the site secure. Purpose limitation applies: data collected for one purpose is not silently reused for another.
7. Sharing
We do not sell, rent, or trade personal data. We share it only with: (a) infrastructure providers that host the site and the waitlist (acting as processors), and (b) authorities if legally compelled. No data brokers, no advertisers.
8. Security
Everything is served over TLS with strict security headers. The waitlist store enforces row-level security with no client access paths, and submissions are validated server-side. The site itself has no accounts and holds no user sessions. Our own posture is described on the Security page.
9. Retention
- Hosting logs: short-lived, security-only, routinely rotated.
- Waitlist emails: kept until launch outreach is complete or you ask to be removed, whichever comes first — then deleted.
- Correspondence: kept as long as needed to handle the matter.
10. Your Rights
Ask us what we hold about you (for this website, it can only be a waitlist email and any correspondence), correct it, export it, or have it deleted: privacy@arcandel.com. EU/UK (GDPR) and California (CCPA/CPRA) residents hold these as legal rights; we honor them for all users regardless of region, and respond to verified requests within 45 days. We do not “sell” or “share” personal information as those terms are defined in the CCPA/CPRA.
11. International Transfers
Our infrastructure is hosted in the United States. If you visit from elsewhere, the data described here is processed in the US under the safeguards described in this policy.
12. Children’s Privacy
This website is general-audience informational content and is not directed to children under 13; we do not knowingly collect personal information from them, and will delete any we learn of. The Aerye app itself is for adults 18 and older, per its own policy.
13. Changes
We will update the effective date when this policy changes and note material changes on this page. Prior versions are available on request.
14. Contact
Arcandel, LLC — privacy@arcandel.com