SigilbasePrivacy policy.
This site runs no analytics, no trackers, and sets no cookies. The list of what we collect is short enough to read in full, and it is below.
Who we are
Sigilbase Ltd, a company registered in England and Wales under company number 17332548 with its registered office at 66 Paul Street, London, England, EC2A 4NA, United Kingdom, is the data controller for the personal data described on this page. Sigilbase Ltd is registered with the Information Commissioner's Office as a data controller, registration number ZC265849. Contact: hello@sigilbase.io.
What this website collects
Nothing. This website has no forms, sets no cookies and loads nothing from anyone else. The pre-launch waitlist form is closed; an address given to it is held under the retention rule below until it is deleted, and is used for nothing beyond the one announcement it was given for.
What this website does not do
- No analytics or measurement of any kind, first or third party.
- No advertising, no pixels, no fingerprinting.
- No cookies. None.
- No third-party scripts, fonts, CDNs, challenges or embeds. Everything a page loads comes from this site.
Ordinary web server logs (IP address, requested page, time) may exist transiently at our hosting and edge providers, OVHcloud and Bunny, for operating and defending the service; they are not used to identify visitors.
Account data
Creating an account involves the data an account needs: your name, email address, organisation and authentication details. Billing details are collected and held by Paddle, which sells Sigilbase as merchant of record; we see the billing name, email address, plan and invoice status, never card numbers. Audit events you send to the service are customer data you control; their contents are redacted from our operator tooling, as described on the security page.
Who else processes data
The current list of subprocessors, what they see and where they run, is published on the security page and kept in one place deliberately. In short: payments through Paddle as merchant of record; hosting on OVHcloud in the United Kingdom with encrypted backups in the United Kingdom and France; DNS, TLS and delivery through Bunny; transactional and support email through Sweego in France.
Retention
Addresses from the closed waitlist are deleted once the announcement they were given for has gone out, unless their owner has become a customer. Account data is kept while the account exists and for the period the service terms set after it closes. Anything you ask us to delete is deleted without argument.
Your rights
Under UK data protection law you can ask for a copy of the personal data we hold about you, ask for it to be corrected or deleted, object to processing, and complain to the Information Commissioner's Office (ico.org.uk) if you think we have handled your data badly. For any of these, one email to hello@sigilbase.io is the whole procedure.
Changes
If this policy changes, the change will be visible here with a new "Last updated" date. We will not weaken the no-tracking stance quietly; it is a stated feature of the product.