Privacy policy.

Last updated: May 12, 2026

Who we are

Onyxaris operates this website at onyxaris.com. For privacy questions, requests or objections, use the contact form and select Other as the primary source if your message is not about a specific scan target.

What this policy covers

This policy covers website visits, analytics and contact or early-access requests submitted through this website. It does not cover customer product data, scan results, security findings or enterprise deployments. Those activities should be governed by a separate customer agreement, data processing agreement and security documentation.

Personal data we process

When you visit the website, hosting and security systems may process technical data such as IP address, user agent, requested URL, referrer, approximate location, timestamps and diagnostic logs. When you submit the contact form, we process the information you provide, such as work email, company, selected source to scan and message content.

Do not submit passwords, tokens, API keys, private keys, credentials, production secrets or other sensitive security material through public forms or email.

Why we process data

We process website and form data to operate and secure the website, respond to inquiries, handle early-access requests, understand website performance and improve website content. The legal bases may include our legitimate interests in operating, securing and improving the website, consent where required for analytics or similar technologies, and steps requested before entering into a business relationship.

Analytics and cookies

This website uses Google Analytics through the Google tag. Google Analytics may use cookies or similar technologies to help us understand aggregate website usage, pages visited, device information and traffic sources. You can control cookies through your browser settings and may use tools provided by Google to opt out of Google Analytics where available.

Service providers

We use service providers to operate this website and process requests. These may include Cloudflare for hosting, security and Cloudflare Pages Functions, Resend for sending contact form emails, Google Analytics for website analytics and Google Fonts for web font delivery. These providers process data according to their own terms, privacy notices and data processing arrangements.

Sharing and transfers

We do not sell personal data. We may share data with service providers that support website hosting, analytics, email delivery, security and administration. Some providers may process data outside your country or outside the European Economic Area. Where required, such transfers should rely on appropriate safeguards such as standard contractual clauses, adequacy decisions or equivalent mechanisms.

Retention

We keep contact form submissions and related correspondence for as long as needed to respond to the request, manage early-access discussions and maintain business records. Technical logs are retained for a limited period appropriate for security, troubleshooting and operational purposes. Aggregated analytics may be retained for longer because it does not directly identify individual visitors.

Your rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability or objection to processing of your personal data. Where processing is based on consent, you may withdraw that consent at any time. You may also have the right to lodge a complaint with a data protection authority.

Security

We use reasonable technical and organizational measures to protect website and contact data. No public website, email channel or internet transmission is fully risk-free, so do not send secrets or sensitive credentials through this website.

Changes

We may update this Privacy Policy as the website, analytics setup, contact workflow or product offering changes. The updated version will be posted on this page with a revised date.