Privacy

Draft. Written by the team, not reviewed by a lawyer.

This website

This site is static. It sets no cookies, loads nothing from third-party hosts, and runs no analytics. Fonts are served from this domain. You can verify all of that in your browser’s network tab, which is the point.

One thing is stored locally: your light or dark theme choice, in localStorage under rx-theme. It never leaves your browser and is not sent to us. Clearing site data removes it.

The web server keeps standard access logs — IP address, timestamp, path, status, user agent — for up to 30 days, to investigate abuse and diagnose faults. They are not used to profile visitors and are not shared.

When you write to us

Mail to hello@rxt.sh or abuse@rxt.sh reaches our own mail server. We keep correspondence for as long as the commercial relationship lasts, and for two years after it ends so we can answer questions about work we did. If you write and we never work together, tell us and we will delete the thread.

Telegram messages are subject to Telegram’s own handling. If that matters to you, use mail.

Client data

Engagements run on the client’s own infrastructure. We do not copy application data, databases or user records, and we do not ask for them.

What we do hold for the duration of an engagement: access credentials, network and service configuration, and logs we are explicitly asked to collect and operate. Credentials are revoked at the end of an engagement; configuration and reports are retained for two years unless the client asks otherwise in writing.

Who else sees it

Nobody, unless the law requires it or the client instructs it. We use no subprocessors that receive client data. We do not sell anything to anyone.

If we are legally compelled to hand something over, we will tell the client unless we are prohibited from doing so.

Your requests

Write to hello@rxt.sh to ask what we hold about you, to correct it, or to have it deleted. We answer within 30 days. Deletion applies except where we must keep a record to meet a legal or accounting obligation.