Samadhi Security runs samadhisecurity.com. This notice says what the site collects, why, where it is kept and for how long.
Browsing the site
- No analytics, advertising or tracking code, and no third-party fonts or scripts (except Cloudflare Turnstile on the contact page, below).
- This site sets no cookies for visitors. Only the site's administrator gets one strictly necessary sign-in cookie.
- Access logs are not enabled, so we keep no record of visitors' IP addresses or the pages they view.
The contact form
When you send the contact form, we receive and keep:
- the name, email address and message you enter, and the page language;
- a keyed hash of your IP address, used only to limit how many messages can be sent per hour. The address itself is not stored, and the hash expires after 7 days and is then deleted automatically.
To keep out spam and bots, the form uses these services:
- Cloudflare Turnstile checks in your browser that you are a person. Cloudflare handles that data under its own privacy policy.
- Anthropic Claude, through Amazon Bedrock, sorts the message as genuine or spam. The result only decides whether we get an email alert; nothing replies to you automatically.
- Resend sends us one notification email with your name, email address and message.
Where data is kept, and for how long
- Contact messages are stored with Amazon Web Services in the US East (us-east-1) region until we delete them after replying.
- Database backups are kept for up to 35 days, so a deleted message also leaves the backups within 35 days.
- Server error logs are kept for 30 days and do not contain visitors' IP addresses.
- We do not sell, rent or share your data for marketing.
Your rights
You can ask at any time to see, correct or delete what you sent us. Email us and we will act on it promptly.
Changes
If this notice changes, we update the date at the top.