Privacy

Who is responsible

Specter Industries LLC (Specter Industries) is the controller of the personal data described here. It is owned and run by Bruce Destrier Specter. For anything in this policy, use the contact form. It is the only channel, and every message reaches the owner.

What this policy covers

This policy covers this website only. The products the company builds, such as Athenos, Clardesk and Unavist, run on their own domains under their own terms and privacy policies, which govern anything you do there. A link from this site to a product is a door, not an extension of this policy.

What is collected

When you load a page. The hosting provider receives the technical details every web request carries: your IP address, your browser type and version, the page you asked for, the page you came from if your browser sends it, and the time. They are used to serve the page and to keep the site running. Specter Industries does not build profiles from them.

When you use the contact form. You give a name, an email address and a message, and the form records the time it was sent. That is everything the form asks for. It also carries two invisible checks that stop automated submissions: a field that only a machine would fill in, and the time the form was open. Neither stores anything about you.

To stop floods. The form endpoint counts how many submissions arrive from one connection in a short window. For that count your connection is turned into a one-way hash. The hash expires within minutes and the address itself is never stored.

Nothing else. No analytics, no measurement scripts, no advertising, no tracking pixels, no fingerprinting, no third-party scripts, and no cookies. The fonts are served from this site, not from Google. See the cookie policy.

Why, and on what basis

Request details are processed to deliver the pages you ask for and to keep the site secure and available. Where a legal basis is required, that is the company's legitimate interest in running a working, safe website, and it does not override your interests because nothing is kept beyond what running the site requires.

Contact-form details are processed to read your message and reply to it. You choose to send them, and the company's legitimate interest in answering you is the basis for keeping them while the conversation is open. Nothing you send is used for marketing, sold, rented or shared, unless the law requires it.

Who processes it

The company does not run its own servers. These providers process data on its behalf, under contracts that limit them to the purposes above. Nobody else receives your data.

• Vercel. Hosts the site and serves every page. Receives the request details every website receives: IP address, browser type, the page requested and the time. Keeps request logs under its own retention schedule.
• Resend. Delivers contact-form messages as email. Your name, email address and message, in transit to the inbox that reads them. Used only when that delivery route is switched on.
• Supabase. Stores contact-form messages in a database table. Your name, email address, message and the time it was sent. Used only when that delivery route is switched on.
• Upstash. Counts contact-form submissions to stop floods. A one-way hash of your connection, kept for minutes and never the address itself. Used only when that delivery route is switched on.

Which delivery route is switched on is stated on the contact page itself: when none is, the form says so and nothing you type is sent anywhere.

Where it is processed

The providers above are based in the United States and may process data there. If you are in the European Economic Area, the United Kingdom, Switzerland or another country whose law requires safeguards for that transfer, the transfer relies on the safeguards each provider publishes in its own data processing terms, such as the European Commission's standard contractual clauses and, where the provider holds it, the EU-US Data Privacy Framework.

How long it is kept

• Contact messages: kept while the conversation is open and for 12 months after it ends, then deleted. If you ask for deletion sooner, they are deleted sooner unless the law requires otherwise.
• Flood-control hashes: minutes. They expire on their own.
• Hosting logs: kept by the hosting provider under its own schedule, not by Specter Industries.

Your rights

Wherever you are, you can ask what is held about you, ask for it to be corrected, ask for it to be deleted, ask for processing to be restricted, object to processing based on legitimate interest, and receive a copy of what you gave in a portable form. Use the contact form. Requests are handled by Bruce Destrier Specter and answered within one month, or sooner. There is no charge.

If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your data protection authority. If you are in California, you have the right to know what is collected, to delete it and to opt out of sale or sharing: this site sells and shares nothing, and does not discriminate against anyone who exercises a right. Wherever you live, any further right your local data protection law gives you applies as well.

Children

This site is not aimed at children and the contact form is for people aged 16 and over. If you believe someone younger has sent personal data through it, use the form and it will be deleted.

Security

Every page is served over HTTPS with strict transport security, a content security policy and the other protective headers a modern site should send. The contact endpoint accepts only what the form sends, refuses requests from other origins, limits submissions per connection and per hour, and stores no raw addresses. If you find a weakness, the site publishes a security.txt saying how to report it.

Tracking signals

Do Not Track and Global Privacy Control signals are honoured by design: there is nothing here that tracks you whether the signal is sent or not.

Changes

If this policy changes, the date at the top changes with it and the change is described in plain words. Nothing is applied retroactively to data you have already given.