06
Privacy
What this site collects, stated in full. It is a short document, because there is little to state.
RevisionRev. 2Issued2026-08-15
§
In summary
- This site sets no cookies.
- It runs no analytics and no third-party trackers.
- Its fonts are served from this domain, not from anyone else’s.
- The contact form sends your message to us and stores no copy of it.
§ 1
Who is responsible
This site is published by Quantum AI Security LLC, registered in Casper, Wyoming, United States, trading as QAISS. Questions about this document, or any request under it, go to the address at the foot of this page and are answered by a person.
§ 2
What the site itself collects
Nothing. There are no cookies, no local storage, no analytics, no tag managers, no advertising pixels, no session recording, and no embedded third-party scripts or fonts. No consent banner appears here because there is nothing to consent to.
§ 3
The contact form
When you submit the form, what you typed is posted to an endpoint on this domain, turned into an email, and sent to us. It is not written to any database, file or log along the way, and no copy of it is kept anywhere but the mailbox it arrives in. If that endpoint is unreachable, the form falls back to handing the message to your own mail application instead, and tells you it has done so.
§ 4
Limiting abuse of that form
An endpoint that sends mail has to be protected from being used to send a great deal of it. To count submissions we take the connecting IP address, combine it with a secret value and store only the resulting one-way hash together with a number. The address itself is never written down, the hash cannot be turned back into one, and every such record deletes itself within the hour. Nothing you typed is stored alongside it.
§ 5
Sending, and who carries the mail
The message is delivered through Resend, an email provider acting on our instructions, and through the ordinary mail systems between them and our mailbox. Email is not a confidential medium in transit, so treat the form as you would any email: if something genuinely must not travel that way, say so in the message and we will arrange a channel that suits it.
§ 6
Mail you send us
However it reaches us, we hold your message and your address for as long as the conversation is live and for a reasonable period afterwards, so a later exchange has its context. We use it to reply to you and for nothing else: no marketing list, no sale, no transfer to any third party for their own purposes.
§ 7
Hosting, and what our host sees
The site is served by Cloudflare, which as a matter of ordinary web operation processes the request — including the visiting IP address — to deliver the page and to protect the service from abuse. Those operational logs are Cloudflare’s and are retained under their terms. We do not receive them, query them, or connect them to anything else.
§ 8
Your rights over what we hold
You may ask what we hold about you, ask for it to be corrected, or ask for it to be deleted, and we will do so within thirty days unless a law requires us to keep it. There is no account to close and no profile to export — in practice the answer is your prior correspondence and nothing else. Ask, and we will tell you plainly.
§ 9
Client systems
Data inside a client’s system is governed by the engagement agreement covering that work, not by this document. Labs publishes reasoning and method; it never publishes a client’s data, architecture, or security mechanisms. See the Labs register for where that boundary sits.
§ 10
Changes to this document
This document is versioned. If what the site collects ever changes, this page changes in the same release, the revision number increments, and the note below records what changed and why. We do not revise it silently.
Requests and questions
Write to the address below with “Privacy” in the subject line.
support@qaisslabs.comRevision history
- Rev. 2 · 2026-08-15The contact form now posts to this domain and is sent on via Resend, replacing the mail-client hand-off, which is retained as a fallback. Adds § 4 (abuse limiting, salted-hash IP counters) and § 5 (the sending provider).
- Rev. 1 · 2026-08-15First published. Static site, no collection, mail-client contact form.
That is the whole document. The engineering is the interesting part.
Open a technical conversation