Privacy practices

Waitlist subscriber data

When you sign up for early access notifications about an Asymm product (Eliya FIPS variant, .deb / .rpm packages, macOS binary, Asymm Forensics, etc.), we collect:

• Email address (required): to send you the notifications you signed up for
• Use case description (optional): to help us understand who's waiting and why
• Timestamp of signup: for operational reasons
• Confirmation status: whether you've completed the double opt-in confirmation

We do NOT collect

• Your name (unless you provide it in the optional use case field)
• Your IP address (beyond what's required for spam prevention during signup)
• Tracking cookies
• Any analytics on your behaviour

What we DO with this data

• Send you product-launch notifications when the products you signed up for ship
• Send you quarterly progress updates about those products
• That's it.

What we will NEVER do

• Share it with third parties
• Sell it to anyone
• Use it for advertising
• Use it for any product other than the ones you signed up for
• Send you unsolicited marketing about unrelated topics

Your rights

Unsubscribe. Every email we send includes a one-click unsubscribe link. If you unsubscribe from a product list, you stop receiving emails from that list immediately.

Data export. Email privacy@asymm.systems to request an export of all personal data we hold about you. We respond within 30 days.

Data deletion. Email privacy@asymm.systems to request deletion of your personal data. We delete within 30 days and confirm by email.

GDPR. EU subscribers have full GDPR rights including data portability, rectification, and the right to object to processing. Email privacy@asymm.systems.

GitHub and public repository contributions

If you contribute to Asymm's public repositories on GitHub (issues, pull requests, discussions), GitHub's privacy policies apply. Asymm does not aggregate or process this data beyond GitHub's normal operations.

Website analytics

Asymm's website (asymm.systems) does not use third-party analytics (Google Analytics, Mixpanel, Heap, Amplitude, etc.). We do not track visitor behaviour across the site.

Server access logs are retained for 30 days for operational reasons (debugging, security incident response). They are not used for marketing or analytics.

Privacy contact

Privacy questions, concerns, or requests: privacy@asymm.systems. Response target: within 7 days for questions, within 30 days for data requests.

Updates to this policy

When we update this privacy policy, the change is documented in the policy's git history. For substantive changes that affect how we use your data, we email subscribers before the change takes effect.