Privacy Policy
Effective date:
Last updated:
Privacy at a Glance
- We collect only what we need to run this website, secure it, and respond to you.
- We do not sell your personal information, "share" it for cross-context behavioral advertising, or use it for targeted advertising.
- We do not use third-party advertising or tracking cookies.
- We do not use your personal information to train artificial intelligence models or to make automated decisions that have legal or similarly significant effects on you.
- We honor Global Privacy Control (GPC) and similar browser opt-out signals.
- You can ask to access, correct, delete or export your information at any time by emailing autodelete@theydeadyet.net.
1. Who We Are
TheyDeadYet.Net ("we", "us" or "our") operates the website at https://theydeadyet.net/ and the related applications and services available through it (together, the "Service"). We are responsible for (the "controller" of) the personal information described in this policy.
This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies to visitors of our public website, people who contact us, and users with an account on the Service.
2. Information We Collect
Information you give us
- Contact form submissions: your first and last name, company, email address, phone number, the content of your message, and any context you choose to include.
- Account information: if you are given an account on the Service, your name, email address, login credentials (passwords are stored only in hashed form) and the permissions assigned to you.
- Content you enter: records, files and other information you create or upload while using the Service.
Information collected automatically
When you visit pages of the Service, our servers record a basic access log, which includes:
- Your IP address
- The page address (URL) requested and the date and time of the request
- Session and visitor identifiers stored in first-party cookies (see Cookies)
- Your account email address, if you are signed in
Information we do not collect
We do not intentionally collect sensitive personal information such as government identification numbers, financial account details, precise geolocation, health information, biometric data, or information revealing racial or ethnic origin, religious beliefs or sexual orientation. Please do not include this kind of information in messages you send us.
3. How We Use Information and Our Legal Bases
We use personal information only for the purposes below. Where data protection laws such as the EU or UK General Data Protection Regulation (GDPR) apply, we rely on the legal basis listed for each purpose.
| Purpose | Information used | Legal basis |
|---|---|---|
| Respond to your inquiries and requests | Contact form submissions | Your request (steps prior to a contract) and our legitimate interest in answering inquiries |
| Provide, maintain and support the Service | Account information, content you enter | Performance of a contract |
| Sign you in and keep your session secure | Account information, session cookies | Performance of a contract and legitimate interest in security |
| Protect the Service, prevent fraud and abuse, and investigate security incidents | Access logs, IP addresses, cookies | Legitimate interest in security |
| Understand how the Service is used so we can improve it | Access logs, visitor identifiers | Legitimate interest in improving the Service |
| Comply with law and respond to lawful requests | Any information, as required | Legal obligation |
Where we rely on legitimate interests, we have balanced those interests against your rights, and you may object at any time (see Your Privacy Rights). We will not use your information for a new purpose that is incompatible with these purposes without telling you first and, where required, asking for your consent.
4. Cookies and Similar Technologies
We use a small number of first-party cookies. We do not use third-party advertising cookies, cross-site tracking pixels, or social media trackers.
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
sessionid | Strictly necessary | Keeps you signed in and maintains your session | Up to 2 weeks, or until you sign out |
csrftoken | Strictly necessary | Protects forms against cross-site request forgery | Up to 1 year |
lib_2398426 | First-party analytics | A random identifier that lets us count unique visits in our own access logs | Up to 1 year |
Strictly necessary cookies are required for the Service to work and cannot be switched off in our systems. You can block or delete cookies through your browser settings, but parts of the Service, such as signing in or submitting forms, may then stop working.
Opt-out preference signals: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of any sale, sharing or targeted advertising use of your information for that browser, in addition to the commitments in Section 6.
5. How We Share Information
We share personal information only as described below:
- Service providers: companies that host, operate, secure or support the Service on our behalf (for example, hosting and email providers). They are bound by written contracts to use the information only to provide services to us, to keep it confidential and secure, and to delete it when the service ends.
- Legal requirements: when we believe in good faith that disclosure is required to comply with a law, regulation, court order or other legal process, or to protect the rights, property or safety of TheyDeadYet.Net, our users or the public.
- Business transfers: if we are involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
- With your direction: when you ask us to, or give us your consent to, share it.
6. No Sale, Sharing or Targeted Advertising
We do not sell personal information, and we do not "share" personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and other U.S. state privacy laws. We do not process personal information for targeted advertising or profiling that produces legal or similarly significant effects. We have not done any of these things in the preceding 12 months, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.
7. How Long We Keep Information
We keep personal information only as long as needed for the purposes described in this policy:
- Contact form submissions: for as long as needed to respond to and follow up on your inquiry, and then for no more than 24 months.
- Account information and content: for as long as your account is active, and then deleted or anonymized within 90 days of account closure, unless the organization that administers your account directs otherwise.
- Access logs: for no more than 12 months, unless needed longer to investigate a specific security incident.
We may keep information longer where the law requires it or where it is needed to establish, exercise or defend legal claims.
8. How We Protect Information
We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encryption in transit (HTTPS), hashed password storage, role-based access controls that limit access to people who need it, and protection against common web attacks. No method of transmission over the Internet or of electronic storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities as required by law.
9. International Data Transfers
We are based in the United States, and the Service is hosted and operated there. If you access the Service from outside the United States, your information will be transferred to, stored in and processed in the United States, where data protection laws may differ from those in your country. Where required, we protect these transfers with appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum.
10. Your Privacy Rights
Depending on where you live, including under the GDPR, the UK GDPR, the CCPA/CPRA and other U.S. state privacy laws, you may have the right to:
- Know and access the personal information we hold about you and how we use it
- Correct inaccurate personal information
- Delete your personal information
- Receive a portable copy of your personal information in a commonly used format
- Object to or restrict certain processing, including processing based on legitimate interests
- Opt out of the sale or sharing of personal information, targeted advertising and certain profiling (we do not do these things, but you may still submit a request)
- Withdraw consent at any time, where we rely on consent, without affecting processing that already took place
- Appeal a decision we make about your privacy request
- Lodge a complaint with your local data protection authority or state attorney general
We will not discriminate or retaliate against you for exercising any of these rights.
11. How to Exercise Your Rights
To make a request, email us at autodelete@theydeadyet.net or use our contact form, and tell us which right you want to exercise.
- Verification: to protect your information, we will verify your identity before acting on a request, usually by confirming control of the email address associated with your information. We will only use information provided for verification for that purpose.
- Authorized agents: you may use an authorized agent to make a request on your behalf. We may ask for written proof of the agent's authority and verify your identity directly.
- Timing: we will respond within 30 days, or within any shorter period your local law requires, and in any case within 45 days. If we need more time, as permitted by law, we will tell you why.
- Appeals: if we decline your request, you may appeal by replying to our decision with the subject line "Privacy Appeal". We will respond to appeals within the period required by law.
- Cost: requests are free, unless they are clearly unfounded or excessive.
If your account is provided by an organization (for example, your employer), that organization may control your information in the Service, and we may refer your request to it.
12. Children's Privacy
The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us, and we will delete it.
13. Links to Other Sites
The Service may link to websites and services that we do not operate. Their privacy practices are governed by their own policies, and we encourage you to review them. We are not responsible for the content or privacy practices of third-party sites.
14. Changes to This Policy
We may update this policy to reflect changes in our practices or the law. We will post the updated policy on this page and update the "Last updated" date at the top. If we make material changes, we will give you notice before they take effect, for example by email or with a prominent notice on the Service, and we will ask for your consent where the law requires it.
15. Contact Us
If you have questions about this policy or how we handle personal information, contact TheyDeadYet.Net:
- By email: autodelete@theydeadyet.net
- Through our website: https://theydeadyet.net/contact/