This page is a draft under legal review and does not take effect until it is final.

Privacy

What we collect, and what we do with it.

This policy covers this site: the contact form, the fragility scan, accounts and status pages.

Who we are

Kustos is run by [Legal entity], [Mailing address].
Email [email protected] with any question about this policy.
This policy takes effect on [Effective date].
When it changes, the new version goes on this page with a new effective date.
This site does not follow you onto other sites, so a Do Not Track signal changes nothing here.

Your name, work email, company and role, and what you built, in up to 4,000 characters.
The plan you picked on the pricing page, when you came from there.
A person reads it and replies within two business days.
Do not put passwords or customer data in it.

An account holds your email address, the day you made it and the status pages it can open.
It holds a one-way hash of your password, never the password itself.
It keeps a company name too, when one is sent with the sign-up.
When you agree to the terms and this policy at sign-up, it records when you agreed and which version of the text you agreed to.
A sign-in session holds its own id, your account id and two dates. It holds no IP address and no device details.
A session lasts 14 days. One account keeps at most 10 sessions, and the oldest goes first.

kz_session keeps you signed in for 14 days. Page script cannot read it.
kz_signed_in holds the character 1, which tells the header to show your account link. It lasts 14 days too.
kz_claim holds a status page link for 60 minutes while you sign in to open it. Page script cannot read it.
The first two are set only when you sign up or sign in. The third is set only when you open a link that adds a status page before you have signed in with the address it was sent to.
No script on this site tracks you or shows ads, and nothing is kept in your browser storage.

Each time you scan a link, our server requests it once. It follows up to 5 redirects, stops after 6 seconds and reads at most the first 64 KB.
What the link answered goes back to your browser. We store neither the link nor its answer.
A file you drop or choose stays in your browser. The page reads only its name and the date it last changed.
Tool names stay in your browser until you send the list to a person.
The list you send holds each tool name, what it was built with and the scores the scan gave it, with your name, company and role.

A status page shows what we publish for a client about its tools, including the names of the people who own them and any documents we share.
Anyone holding the link can read the page, so treat it like a document we mailed you.
A change request is a note of up to 500 characters. It waits in a queue until a person reads it.

Your IP address is used to limit how often one network can send a form, sign in or run a scan.
Sign-in and sign-up also count attempts against a hash of the email address typed.
These counts live in memory only and clear when the site restarts.
The site writes no record of the pages you visit. The server keeps its system logs for 60 days.

The company that rents us the server this site runs on carries all of its traffic.
Backups of the site's records go to a storage company, encrypted before they leave the server.
The operator may read what you send through a form with the help of an AI model. When that happens, its provider receives your name, company and role, and what you told us.
Replies come from the operator's own mailbox, so their mail service carries them.
This site takes no payments. A person sets up each plan and bills it by invoice.
We do not sell your personal information or share it for advertising.

A form or a change request stays on the site until the operator copies it to their own machine. The site removes its copy once 30 days have passed after that.
The operator's copy has no end date yet.
A link that adds a status page to an account expires after 30 days.
An account stays until you ask us to delete it.
Encrypted backups keep copies of the site's records for up to a year.
What we hold about a client's tools follows that client's data-handling agreement.

Email [email protected] to see, correct or delete what we hold about you.
If the law where you live gives you other rights over your information, email us to use them.
This site is not aimed at people in the European Union or the United Kingdom.
This site is for people at work. It is not directed to children.

A person sets up Watch for you by hand. The contact form makes no account and starts no check.
After that, the checks run on our schedule. Watch holds the links and the access it needs to check your tools.

Hand it over. Get back to the work that matters.