Privacy Policy

This Privacy Policy explains how Orange Stealth, LLC, a Wyoming limited liability company ("OrangeStealth", "we", "us"), collects, uses, and protects personal data when you visit orangestealth.com and use the tools and services offered there (the "Service"). We act as the controller of the personal data described below.

1. What we collect

We keep the data we collect deliberately small. It comes from a few places:

• Site analytics. For each page view we store one append-only log line: the page, the referrer, campaign parameters in the link (the utm_values), and a per-day one-way hash derived from your IP address and browser. We do not store your IP address, and we do not use cookies for tracking. An optional cookie stores only your browser's preference to exclude its visits and domain checks from audience metrics. The daily hash lets us count distinct visitors for a day and nothing more. If you book a call, we also keep with the appointment how you reached the booking page (the campaign values in the link you followed and the referring site), so we know which of our messages are worth sending.
• Free outside check. When you run the check we record the domain you entered and a summary of the public result, so we can understand usage. We do not record who ran it. If you add your email to receive a detailed report, we use that address to send it.
• Booking a call. We store the time you chose, your name, your email, and the optional note about your security concern, so we can hold the appointment and reach you for it.
• Research report requests. We store your email, whether you opted in to future updates, and a delivery record, so we can send the PDF and honor your choice.
• Purchases. Payment is handled by our payment processor, Stripe. We never see or store your full card number. We keep an order record: the package, the amount, transaction and customer identifiers from Stripe, and the name, email, domain, and any phone number tied to the order.
• Messages you send us, such as email to info@orangestealth.com.

We do not ask for special-category data and ask that you not send it to us unless it is necessary for your request.

2. How we use it

We use personal data to run the Service: to return your free check and any report you request, to schedule and hold your call, to deliver a purchased assessment and communicate about it, to process payments and prevent fraud, to keep the site secure and reliable, and to comply with our legal obligations. If you opt in, we also send occasional research and service updates; you can opt out at any time by replying "unsubscribe" to any such email.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

3. Who we share it with

We disclose personal data only to the service providers that operate the Service on our behalf, under contract, and only so they can provide their service to us:

• Stripe, Inc., for payment processing (payment and billing data).
• Twilio SendGrid, Inc., for transactional and opted-in email (your email address and message content).
• Cloudflare, Inc., for DNS, content delivery, and network security (connection and log data).

We otherwise disclose personal data only to comply with the law or a lawful request, to protect the rights and safety of OrangeStealth and others, in connection with a business transfer, or with your direction.

4. How the free check and assessment work

Our checks and the External Security Posture Assessment read only public information: public DNS records, public certificate-transparency logs, and an ordinary request to a public web page. They do not log in to, scan the internal network of, or otherwise touch the systems of the domain you submit. You should only submit a domain you own or are authorized to check.

5. How we protect and store data

Data is transmitted over encrypted (TLS) connections and stored on servers we operate, with access restricted to what is needed to run the Service. No security measure is perfect, and we cannot guarantee absolute security.

6. How long we keep it

We keep personal data only as long as we need it. Analytics logs and free-check records are kept in aggregate for usage analysis. Booking and report-request records are kept while they are useful and then removed. Billing and tax records are kept as long as the law requires. You can ask us to delete data we hold about you (see Section 8).

7. Cookies

The site does not set tracking cookies and does not use third-party advertising cookies. If you enable browser exclusion in traffic settings, a constant-valued preference cookie lasts one year. It contains no tracking identity. You can turn it off there or clear your browser cookies. Other browsers and private sessions have separate preferences. Raw log records are preserved; the preference excludes marked future requests from audience totals.

8. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, and to withdraw a consent you gave. To make a request, email info@orangestealth.com. We will verify your request and respond within the time the law requires. California residents have rights under the CCPA and CPRA, including the right to know, delete, and correct; we do not sell or share personal data for cross-context behavioral advertising.

9. Children

The Service is meant for businesses and is not directed to children under 18. We do not knowingly collect their personal data.

10. Changes

We may update this Policy. We will post the new version here with a new effective date, and your continued use after that date means you accept it.

11. Contact

Questions or requests: info@orangestealth.com. Postal: Orange Stealth, LLC, 30 N Gould St Ste R, Sheridan, WY 82801.