Privacy Policy - SentinelSec Studios

Our Commitment to Privacy

At SentinelSec Studios, we are committed to protecting your privacy and ensuring the security of your information. We believe in collecting only the data that is absolutely necessary to provide our services and maintain security. This comprehensive privacy policy explains how we handle your information and what rights you have regarding your data.

Minimal Collection

We only collect what's necessary

No Data Sharing

We don't sell or share your data

Transparent Practices

Clear and honest about our practices

Information We Collect

We collect only the minimal information necessary to provide our services and maintain security. Below, we outline each category of data, why we collect it, and how it is used:

Account Information

Email address: Used for account creation, password resets, and important notifications. We do not use your email for marketing unless you opt in.
Username: Used to identify you within our services. You may choose a pseudonym if you wish.
Password: Encrypted and never stored in plain text. We use industry-standard hashing and salting techniques.

What this means for you: We only ask for the minimum information needed to create and secure your account. You are never required to provide more than is necessary for basic functionality.

Technical Information

IP address: Collected automatically for security, fraud prevention, and to comply with legal requirements. Retained for up to 90 days or longer if associated with abuse or blocking.
Browser type and version: Helps us ensure compatibility and troubleshoot issues.
Operating system and device information: Used for analytics and to improve your experience.

What this means for you: We do not use technical data to track you across the web or build a profile. It is used solely for security, troubleshooting, and service improvement.

Analytics Data

Page views and navigation patterns: We use privacy-focused analytics tools (such as Plausible or Matomo) to understand how our services are used. No personally identifiable information is stored in analytics.
Service usage statistics: Aggregated data to help us improve features and performance.
Performance metrics: Used to monitor uptime and resolve technical issues quickly.

What this means for you: Analytics are anonymized and never sold or shared. We use them only to make our services better for everyone.

Security Data

Failed login attempts: Logged to detect and prevent unauthorized access.
Suspicious activity logs: Used to investigate and respond to potential threats.
Blocked IP addresses: Retained indefinitely until an appeal is granted, to protect our users and services.

What this means for you: Security data is only used to keep our platform safe. If you are blocked, you may appeal and request a review of your case.

What We Don't Collect

We believe in privacy by design. Here is a detailed list of what we intentionally do NOT collect, and why this matters for your privacy:

Personal identification documents (e.g., government-issued IDs, passports, driver's licenses)
Financial information (credit card numbers, bank account details, payment card data)
Precise location data (we only use IP-based geolocation for security, never GPS or continuous tracking)
Biometric data (fingerprints, facial recognition, voiceprints, etc.)

Social media account access or data
Personal communications (emails, messages, call logs)
Third-party tracking data (we do not use third-party ad networks or trackers)
Unnecessary personal details (such as gender, ethnicity, or political views)

Why this matters: By not collecting these types of data, we reduce your risk in the event of a breach, avoid unnecessary profiling, and respect your right to privacy. You can use our services with confidence that your sensitive information stays private.

How We Use Your Information

We use your information only for specific, legitimate purposes:

Security & Abuse Prevention

To protect our services from abuse, fraud, and security threats. IP addresses and security logs are retained for up to 90 days or indefinitely for blocked users until appeal.

Account Management

To create and manage your account, provide customer support, and communicate important service updates.

Service Improvement

To analyze usage patterns and improve our services, user experience, and performance.

Legal Compliance

To comply with applicable laws, regulations, and legal requests from authorities.

Data Sharing & Third Parties

We do not sell, rent, or share your personal information with third parties or partners.

Your data stays with us. The only exceptions are:

Legal Requirements: When required by law, court order, or government request
Service Providers: Essential technical services (hosting, security) under strict data protection agreements
Security Emergencies: To prevent fraud, abuse, or security threats

Data Retention Policy

We retain your data only as long as necessary for the purposes outlined in this policy:

Account Data

Retained while your account is active. Deleted within 30 days of account deletion.

IP Addresses & Logs

Retained for up to 90 days for security purposes. Indefinitely for blocked users until appeal.

Analytics Data

Aggregated and anonymized. Retained for up to 2 years for service improvement.

Security Data

Retained as long as necessary for security and abuse prevention.

Data Protection & Security

We implement industry-standard security measures to protect your information:

End-to-end encryption for data transmission
Strong password hashing and salting
Role-based access controls
Regular security audits and penetration testing

Secure data centers with physical security
Regular security updates and patches
Data anonymization where possible
Incident response and breach notification procedures

Important: While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but we continuously work to improve our security practices.

Your Rights & Choices

You have the following rights regarding your personal information:

Access & Portability

Request a copy of your personal data and information about how we process it.

Correction

Request correction of inaccurate or incomplete personal information.

Deletion

Request deletion of your personal data, subject to legal and security requirements.

Objection

Object to processing of your data for legitimate interests or direct marketing.

Children's Privacy

We do not knowingly collect personal information from children under 13 years of age.

If we become aware that we have collected personal information from a child under 13, we will take immediate steps to delete such information. If you believe we might have any information from or about a child under 13, please contact us immediately.

International Data Transfers

Our services may be accessed from various countries around the world. We ensure that any international transfers of your personal data are conducted in compliance with applicable data protection laws and regulations, using appropriate safeguards such as standard contractual clauses.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

Posting the updated policy on our website
Sending you an email notification
Displaying a prominent notice on our services

Your continued use of our services after any changes indicates your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or your personal data, please contact us:

Email

hello@sentinelsec.studio

We aim to respond to all privacy-related inquiries within 48 hours.