Privacy Policy

Who we are

Tripwire (tripwire.so) is operated by Tachyon International Inc. (we, us). This policy explains the personal data we process when you visit the site, request a bundle, sign in, or receive alerts, and the choices you have. Questions about your privacy can be sent to [email protected].

The short version

What we collect:

• Your email address, to send you bundles and alerts.
• Basic account details once you have an account.
• The activity your tripwires detect, which we show to you.
• Minimal server logs, to keep the service running and secure.

What we don’t do:

• We don’t use advertising or tracking cookies.
• We don’t track you across other sites or devices.
• We don’t sell or rent your personal data.
• We don’t collect more than we need.

Information we collect

Email address. When you request a bundle, sign in, or set up alert delivery, we collect your email address so we can deliver those messages.

Account information. If you create an account, we store your email address and your plan and role.

Tripwire activity. When one of your tripwires is touched, we process the technical detail of that event, such as the source IP address, the user agent, and the action taken, and we show it to you so you can respond. This is data about whoever interacted with your decoy. You control it, and we process it to provide the alerting service to you.

Server logs. To operate the service and protect against abuse, our servers record limited technical data with each request, such as IP address, user agent, and the page or endpoint accessed.

Website analytics. See Cookies and analytics below.

How we use your information

We use the information above to:

• Deliver your bundles and tripwire alerts.
• Provide, maintain, and secure the service.
• Respond to your questions and requests.
• Prevent abuse and protect the service and its users.
• Meet our legal obligations.

For visitors in the EEA and the UK, our legal bases are: performing our contract with you to provide the service; our legitimate interests in running, securing, and improving the service and preventing abuse; your consent where we ask for it; and compliance with legal obligations.

Cookies and analytics

We use a single strictly necessary cookie, tripwire_session, to keep you signed in. It is not used for tracking or advertising.

Our website analytics is cookieless. It does not set cookies, does not store identifiers on your device, and does not track you across sites or devices. To produce aggregate visitor statistics it processes limited technical data such as your IP address, user agent, and the pages you view, and we use this only to understand and improve the site. Because nothing is stored on your device, we do not show a cookie banner.

How we share information

We do not sell or share your personal data for advertising, and we never have.

Service providers. We use a small number of vetted providers to run Tripwire, for example cloud infrastructure, data storage, and email delivery. They process data only to provide these services to us, under contract, and may not use it for their own purposes. We can provide the current list on request.

Legal and safety. We may disclose information if required by law or legal process, or where we believe it is necessary to protect the rights, safety, and security of our users, the public, or Tripwire.

Business transfers. If Tachyon is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will continue to protect it and will notify you of any change in control or applicable policy.

Where your data is processed

Tripwire is operated from the United States, and your data is processed and stored there. If you use Tripwire from the EEA, the UK, or elsewhere, your data will be transferred to and processed in the United States, and we rely on appropriate safeguards, such as Standard Contractual Clauses, where they are required.

Data retention

• Bundle links expire seven days after they are issued.
• The contents of notification emails are discarded from our systems once the email has been sent.
• We keep account information and tripwire activity for as long as your account is active or as needed to provide the service, and then delete or anonymize it.

You can ask us to delete your data at any time.

Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing. Residents of the EEA and the UK can also lodge a complaint with their local data protection authority. California residents have the right to know, delete, and correct their personal information, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law.

To exercise any of these rights, email [email protected]. We may need to verify your identity before we act on a request.

Security

We protect your data with technical and organizational measures suited to its sensitivity. Our Security page describes how Tripwire is built and how to report a vulnerability.

Children

Tripwire is a tool for developers and businesses and is not directed to children. We do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy as the product and our practices evolve. We will revise the date above and, for material changes, take reasonable steps to notify you.

Contact

Questions, requests, or concerns about privacy can be sent to [email protected]. Tripwire is a product of Tachyon International Inc.