Privacy.

Viscosity is operated by Business name — to be confirmed. For anything in this notice, use the contact form on the home page.

Only what you send us through a form, plus what is needed to take payments and keep the site safe.

Preorders

Your email address, your name if you give it, what you ordered and the amount, the version of the terms you accepted, the payment, refund and delivery status with a history of each change, the references PayPal returns, and any notes our team adds to your order. PayPal’s payment notifications are kept only as a summary of ids, statuses and amounts.

Why: to take and confirm your preorder, email you about it, answer questions and keep payment records.

License keys and your account

For each license key issued after a paid preorder: the key’s public id, a one-way hash of its secret part (the key itself is never stored in readable form), its status, and when it was issued, replaced, revoked or last used. When you sign in to your account: a sign-in session (a one-way hash of its token, when it started, was last used and expires, and your browser’s user-agent string), and a log of sign-ins and key changes with a one-way hash of the IP address used.

Why: to let you sign in with your key, keep your account secure, and revoke keys after a refund or chargeback.

Waitlist

Your email address, whether you confirmed it, the version of the consent text you agreed to, and when you joined, confirmed or unsubscribed.

Why: to send the launch updates you asked for. Joining needs a click on a confirmation link.

Contact

Your name, email address, topic, an order reference if you add one, and your message. When a support inbox is set up, a copy is emailed there.

Why: to reply to you.

Emails we send

A copy of each email we send you (recipient, subject and content) and whether it was delivered. An email that carries a license key is stored encrypted, and the key is erased from our copy once the email has been sent.

Why: so a failed delivery can be retried and no email is sent twice.

Abuse limits

Short-lived request counters keyed by one-way hashes of your IP address and, on forms, your email address, or by a license key’s public id on sign-in attempts. Your IP address isn’t stored in readable form for this.

Why: to slow down repeated or automated requests.

Admin activity

For staff only: their account, sign-in sessions (with the browser’s user-agent string), and a log of actions taken in the admin area — who, what, when, and a one-way hash of the IP address used.

Why: security, and a record of every change to orders, prices and settings.

You enter card or bank details with PayPal, not on this site, and we don’t store them. There are no analytics, advertising or tracking scripts on this site.

The public site sets one cookie, and only if you sign in to your account with a license key: a sign-in cookie that is needed for that and is cleared when you sign out or it expires. Staff signing in to the admin area get a separate admin sign-in cookie in the same way.

Your browser’s local storage keeps the tabs, scripts and settings you create in the interface on the home page (vsc-executor:v1). They stay on your device and are never sent to us; clearing this site’s data removes them.

PayPal’s script loads only when you reach the payment step of checkout. The PayPal button and window are provided by PayPal and may use PayPal’s own cookies, under PayPal’s privacy statement.

PayPal

Processes preorder payments. It receives what you are buying, the amount and our order reference; you then pay with PayPal directly.

Resend

Delivers our emails. It receives the recipient address and the message.

Hosting & database

Run this site and store the records described above, and may keep short-lived request logs (such as IP address and browser type): Providers — to be confirmed

Retention periods — to be defined by the owner

To ask what we hold about you, or to have it corrected or deleted, use the contact form on the home page.

Every waitlist email includes a link to unsubscribe.

Your rights under the data-protection law that applies to you, and the legal basis for each use above — to be confirmed with counsel