Privacy Policy

If you just browse

Nothing that identifies you. We use Cloudflare Web Analytics for aggregated counts (visits, referrer, country, device category): no cookies, no fingerprinting, no cross-site tracking. Our host (AWS, via CloudFront) also keeps standard request logs (IP address, user agent, path, timestamp) for security and debugging. They are retained for 30 days and then discarded, and we do not use them to identify or follow visitors.

If you create an account

• Email address, to sign you in and contact you about your account.
• First and last name, and an organisation if you choose to add one.
• Authentication and sessions. Sign-in is passwordless: we email you a one-time code (there are no passwords to store). To keep you signed in, your browser holds a session token, and we store a rotating session reference on our side.
• Saved state tied to your account, such as watchlists and preferences.

If you contact us or send feedback

The contact form collects your name, email, optional company, and message. In-app feedback collects your message plus basic technical context (the page you were on, screen size, browser, and app build) so we can reproduce issues. These are stored in our database and used only to respond and to improve the product.

What stays on your device

Vantafort uses your browser's localStorage for your current session and the things you set yourself: watchlists, visibility toggles, view preferences. Clearing your site data wipes it and signs you out.

What we don't collect

• No passwords. Sign-in is a one-time email code.
• No browser fingerprints.
• No precise location.
• No cross-site tracking.
• Nothing we sell, license, or share with advertisers.

Two infrastructure providers are involved:

• Amazon Web Services. Hosts the application, serves it via CloudFront, stores the database (your account, saved state, and contact/feedback messages), and sends account email such as your sign-in codes via Amazon SES.
• Cloudflare. Anonymous web analytics only: aggregated counts, no cookies, no fingerprinting, no IP-tied logs.

That is the full list. No advertisers, no data brokers, no marketing networks, no tracking pixels, no third-party SDKs.

• Account data (email, name, organisation) and anything tied to your account (saved state, and the identifiable parts of any contact or feedback you sent) is kept until you delete your account. When you delete it, we wipe everything tied to you.
• One-time sign-in codes expire within minutes of being sent.
• Anonymous infrastructure logs are kept for 30 days, then discarded.

Under GDPR (EU and UK), CCPA (California), and the Australian Privacy Principles, you can ask what data is held about you, and ask for it to be corrected or deleted.

You can edit your details in Settings and delete your account at any time, which removes everything tied to you. For anything else, email red@vantafort.com.

You can also opt out of analytics yourself, at any time, by blocking static.cloudflareinsights.com in your browser or with an extension.

If anything on this page changes, we update the text and the "Last updated" date at the top. Material changes will also be noted on the landing page.

Privacy questions: red@vantafort.com