Effective Date: 31 March 2025 Operator: Andrew Hughes trading as 3rdKey Contact Email: admin@3rdkey.com
This Privacy Policy sets out how 3rdKey (“we”, “our”, or “us”) collects, uses, stores, and protects personal data in connection with its services, including the website located at [3rdKey.com] (the “Service”). By using the Service, you agree to the terms of this Privacy Policy.
3rdKey is operated by Andrew Hughes, trading as 3rdKey, based in Tamworth, United Kingdom.
2.1. Minimal Data Approach We collect and retain only the minimum data required to provide the Service. Use of the Service does not require you to provide personal information such as an email address.
2.2. Optional Email Address If you choose to provide an email address, it may be used for the following purposes:
2.3. Technical Data We store certain session-related metadata required for functionality and security, including:
3.1. User Keys We do not store user encryption keys. During login, the user’s keys are split using a randomized algorithm. One part remains in the user’s browser, and the other is stored temporarily on the server. Neither part can be used alone.
3.2. Secure Communication Communication between the browser and server is encrypted using standard industry protocols and a Diffie-Hellman key exchange, secured via a user-supplied key (the “3rdKey”).
3.3. Encryption Methods We employ a combination of standard encryption algorithms and proprietary cryptographic methods designed to exceed conventional security measures. Encryption and decryption are performed within the user session and are not possible outside of it.
4.1. Essential Cookies We use only essential cookies required for site functionality and session integrity. No third-party, advertising, or analytics cookies are used.
5.1. Payment Processing We use Stripe to process payments and manage subscriptions. When you subscribe or update your plan:
5.2. Stored Metadata We retain your Stripe customer ID and a copy of the product metadata for use in billing, subscription logic, and service display.
For more information, please consult:
6.1. Email Notifications If you have provided an email address, we may send you communications regarding:
6.2. Opt-Out You may disable or change communication preferences in your account settings. Certain system notifications cannot be disabled if an email address is present.
7.1. Retention We retain personal data only as long as necessary for the operation of the Service or as required by law.
7.2. Your Rights You have the right to:
We seek to comply with applicable privacy laws and regulations, including:
This service is not intended for use by individuals under the age of 13. If we learn that data has been collected from a child without consent, we will delete it promptly.
We may amend this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. If material changes are made, we will notify active users where appropriate.
Operator: Andrew Hughes trading as 3rdKey Location: Tamworth, United Kingdom Email: admin@3rdkey.com