Last Updated: January 1, 2026
This Privacy Policy explains how Aegis Optikon ("Company," "we," "us," or "our") collects, uses, stores, and protects information when you access or use our website, API, Device Producer Network, verification endpoints, and all related services (collectively, the "Service").
By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, you must stop using the Service.
When you log into our Service, we use secure session cookies to maintain your authentication state:
Cookie Characteristics:
All payment information is processed by Paddle.com, our Merchant of Record. We do not store:
We receive from Paddle:
When you use the API, we automatically log:
This is required for security, abuse prevention, billing accuracy, and auditability.
If you link a device to contribute entropy, we collect:
We collect:
| Cookie Name | Purpose | Duration | Essential |
|---|---|---|---|
| session_id | Maintains your authenticated session | 24 hours / until logout | Yes |
| csrf_token | Prevents cross-site request forgery attacks | Session duration | Yes |
| user_prefs | Stores UI preferences (theme, language) | 1 year | No |
Essential Cookies: Session and CSRF cookies are required for the Service to function. Without these cookies, you cannot maintain a secure login session.
Non-Essential Cookies: Preference cookies can be disabled through your browser settings, though this may affect your user experience.
Managing Cookies: You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing ones. However, disabling essential cookies will prevent you from using the Service.
Aegis Optikon does NOT:
Our session cookies are used exclusively for security and functionality, not for tracking or profiling users.
We share minimal billing information with Paddle.com for subscription management, tax compliance, and payment processing. Paddle operates as our Merchant of Record and processes all payments.
We use trusted cloud infrastructure providers for hosting the Service. These providers have access to technical data necessary to operate the Service but do not have access to your encrypted session data or API keys.
We may disclose information when required by law, subpoena, court order, or to protect the security and integrity of our Service. We will notify users of such requests when legally permitted to do so.
We do not share your data with marketing companies, advertisers, or data brokers.
| Data Type | Retention Period | Notes |
|---|---|---|
| Account Information | Until account deletion | Deleted within 30 days of account closure request |
| Session Cookies & Data | 24 hours / Until logout | Automatically purged after inactivity |
| API Usage Logs | 90–180 days | For security auditing and billing verification |
| Entropy Pool States | 30 days maximum | Rolling buffer, automatically deleted |
| Billing Records | 7 years | As required by tax and financial regulations |
| Security Logs | 1 year | For incident investigation and prevention |
When data is no longer needed for the purposes described in this policy, it is securely deleted using cryptographic erasure methods. Backup data follows the same retention schedule and is purged during regular backup rotation.
Depending on your jurisdiction (GDPR, CCPA, etc.), you may have the following rights:
To exercise these rights, contact us at support@aegisoptikon.com. We will respond to legitimate requests within 30 days, as required by applicable law.
Session Control: You can manage your active sessions through your account dashboard, where you can view active sessions and terminate any suspicious or unwanted sessions immediately.
We implement industry-standard security measures to protect your data:
While we implement robust security measures, no system can guarantee absolute security. We continuously monitor and improve our security practices to protect your data.
The Service is not intended for individuals under the age of 18 (or the legal age of majority in your jurisdiction). We do not knowingly collect information from minors. If we become aware that we have collected personal data from a minor without parental consent, we will take steps to delete that information promptly.
As a global service, your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for these transfers, including:
By using our Service, you consent to the transfer of your data to countries that may have different data protection laws than your country of residence.
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or the Service. When we make material changes, we will:
Your continued use of the Service after changes become effective constitutes acceptance of the updated policy. If you disagree with material changes, you may terminate your account before the changes take effect.
Aegis Optikon
30 N Gould St Ste R
Sheridan, WY 82801
United States
Email: support@aegisoptikon.com
Data Protection Officer: dpo@aegisoptikon.com
For questions about this Privacy Policy, to exercise your data protection rights, or to report a security concern, please contact us using the information above. We aim to respond to all legitimate inquiries within 30 days.
For EU/UK residents, you also have the right to lodge a complaint with your local data protection authority if you believe our processing of your data violates applicable law.