Privacy Policy

Information you give us:

• Launch notifications. Your email address, the product you asked about, and, if you arrived through a shared link, the campaign tag on that link so we know which channel brought you here.
• Reservations, once they open. Your email address and the product you reserved. The reservation form will state exactly what it collects before you submit it.
• Support. Whatever you choose to include when you write to us.

Information collected automatically:

• Aggregate analytics. Page views, country-level region, device type, and performance timings, measured by our hosting provider without cookies. No personal profile of you is built.
• Server logs. Our host briefly processes your IP address to deliver pages and protect the site from abuse. We do not use it to identify you.
• Browser session storage. One flag that remembers you already submitted a form. It clears when the tab closes and never leaves your device.

• Seed phrases, BIP39 words, private keys, or passphrases. Ever.
• No accounts and no passwords. The site has no login.
• No payment card details on this site today. Payment happens at shipment.
• No precise location, no biometric data, no health data.
• No data bought from brokers and no advertising trackers.

• To send one confirmation email and one launch notification. No marketing list.
• To hold your reservation and send a pay-to-ship link when your unit dispatches.
• To answer you when you write to us.
• To understand, in aggregate, how the site performs and where visitors come from.
• To keep the site secure and to meet legal obligations.

Where the GDPR or UK GDPR applies, each purpose above rests on one of these bases:

• Consent when you sign up for a notification. You can withdraw it at any time.
• Contract when you reserve a unit and we hold it for you.
• Legitimate interests in keeping the site secure and measuring it with cookieless, aggregate analytics.
• Legal obligation where the law requires us to keep records.

Two service providers process data on our behalf:

• Vercel Inc. (United States) hosts the site and provides the aggregate analytics described above.
• Resend (United States) delivers our email and stores the notification list. Your address stays in that list until the launch notification is sent or you ask us to remove it.

Both act as processors under their own data processing agreements. We never sell your personal information and never share it with advertisers. We disclose data only if the law requires it. If Keepcrypt is ever part of a merger or acquisition, your data transfers with these obligations intact and we tell you first.

Our processors store data in the United States. If you visit from the EEA, the UK, India, or anywhere else, your data is transferred to the US and protected by the safeguards in our processors' data processing agreements, including standard contractual clauses where they apply.

• Notification signups. Until the launch notification is sent or you ask us to remove you, whichever comes first.
• Reservations. Until the reservation is fulfilled or canceled.
• Support emails. As long as needed to resolve your question.

Removal requests are honored within 7 days.

Wherever you live, you can:

• Ask what we hold about you.
• Correct anything that is wrong.
• Delete your data entirely.
• Withdraw consent at any time.

Write to admin@keepcrypt.com. We answer within 7 days, we charge nothing, and we never treat you differently for asking.

Under the GDPR and UK GDPR you also hold the rights to access, rectification, erasure, restriction of processing, data portability, and objection. You can lodge a complaint with your local supervisory authority or, in the UK, with the Information Commissioner's Office.

In the last 12 months we collected only identifiers you gave us directly: an email address, a product choice, and a campaign tag. We do not sell or share personal information as the CCPA and CPRA define those terms, and we have not done so in the preceding 12 months. You hold the rights to know, delete, and correct, and an authorized agent may act for you. Exercise any of them at admin@keepcrypt.com.

Under the Digital Personal Data Protection Act you hold the rights to access, correct, and erase your data, to grievance redressal, and to nominate a person to exercise these rights on your behalf if you are unable to. Grievances go to admin@keepcrypt.com and we respond within 7 days.

We set no tracking cookies and no advertising cookies. Our analytics runs without cookies. There is no cookie banner on this site because there is nothing to consent to. Because we do not track you in the first place, this site behaves the same whether or not your browser sends a Do Not Track signal.

Everything moves over encrypted connections. We collect the minimum the service needs, which today is an email address, and access is limited to the people who send the email. No system is perfectly secure, which is exactly why the product is designed so your seed never touches the internet in the first place.

This site is not directed at children and we do not knowingly collect personal information from anyone under 16. If you believe a child gave us an email address, write to us and we will delete it.

The site may link to other websites. Their privacy practices are their own, and this policy does not cover them. Read theirs before you hand over anything.

When this policy changes, the effective date at the top changes with it. If we hold your email address and a change materially affects how we handle it, we tell you by email before the change takes effect.

Keepcrypt LLC, registered in Wyoming, United States. For anything in this policy, write to admin@keepcrypt.com. We answer within 7 days.