Privacy
Last updated 17 August 2026
This describes what this site actually stores and what it does with it. It is short because the site does little.
Who is responsible
Rapid Ventures OÜ, registry code 14133549, Sepapaja tn 6, Lasnamäe, 11415 Tallinn, Estonia. The controller for everything below. Questions and requests: audit@strictmx.com.
Reading this site
Nothing is collected. There is no analytics, no tag manager, no third-party script of any kind, and no cookie is set for visitors. The pages load only from this domain. Your browser's requests reach the web server and are logged there for a short time in the ordinary way, including your IP address.
The waitlist
If you submit the monitoring waitlist form, your email address and the date are stored, and nothing else. It is used to send one message when the product is ready. Ask and it is deleted.
Buying an audit
Payment is handled by Stripe. Card details go to Stripe and never reach this site — the checkout page is theirs, not mine. What is recorded here is the Stripe session reference, the email address Stripe reports, the amount, the currency and the date, so that the sale can be matched to the work and accounted for.
The intake form
The answers you give are stored so the audit can be performed. Two of them are treated differently: the message headers and bounce messages you paste are encrypted at rest with AES-256-GCM, along with the explanation you give if you cannot obtain headers. Each value is bound to its own row, so a ciphertext moved elsewhere in the database will not decrypt.
Other people's data in what you send
Message headers name senders and recipients who never contacted me. That data is used only to diagnose the problem you paid to have diagnosed, is never copied into any other system, and is the first thing deleted when the report is delivered. The notification email that tells me an intake has arrived deliberately carries no part of it.
What is never written to a log
Message headers, bounce messages, intake answers, email addresses, Stripe payloads and secrets. A log line here carries an error and a session reference at most. This is enforced by tests, not by good intentions.
Who else sees any of it
- Stripe
- Payment processing, and confirming that a session was paid.
- OVH
- Hosts the server this site and its database run on, and the mail server that carries notifications. Located in Beauharnois, Quebec, Canada.
That is the whole list. No analytics provider, no CDN, no email marketing platform, no advertising network.
Data outside the EU
The server and the mailbox are in Beauharnois, Quebec, Canada, which is outside the European Economic Area. Canada is covered by a European Commission adequacy decision for commercial organisations, so the transfer rests on that.
How long it is kept
Intake answers are kept until the report has been delivered and the follow-up round has closed, then deleted. Payment records are kept for as long as accounting law requires. Waitlist addresses are kept until the launch message is sent or you unsubscribe. Nothing is kept because it might be useful later.
Your rights
You can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, object to it being processed, or ask for it in a portable form. Write to audit@strictmx.com and it is done — there is no form and no ticket queue.
If you are not satisfied, you may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the supervisory authority where you live.
Changes
If this notice changes, the date at the top changes with it.