Privacy Policy.

1. Who we are

This privacy policy describes how Krytekon LLC ("Krytekon," "we," "us") handles personal data submitted through krytekon.com and the Vanguard waitlist. Krytekon LLC is a Texas limited liability company with a mailing address at 5900 Balcones Drive Ste 100, Austin, TX 78731, US.

For privacy questions or to exercise any of the rights described below, contact us at vanguard@krytekon.com.

2. What we collect

When you join the Vanguard waitlist or otherwise interact with krytekon.com, we collect a deliberately small set of data:

• Email address — provided by you when you submit the Vanguard signup form. This is the only piece of directly identifying information we ask for.
• Salted SHA-256 hash of your IP address — derived from the network connection at submission time and used solely for rate-limiting and abuse defense. We never store your raw IP address. Hashes are retained for thirty (30) days and then automatically purged.
• Cloudflare Turnstile challenge state — a short-lived token that confirms you are a human and not an automated submission. See our Cookie Policy for details on how Turnstile operates.
• Optional referrer and UTM parameters — truncated to a fixed byte length so we can understand which campaigns drive waitlist signups. Never linked to advertising profiles.

We do not collect names, phone numbers, addresses, dates of birth, government identifiers, payment information, biometrics, precise geolocation, or health data through this site. Krytekon is not currently selling products and does not yet collect any data related to a purchase.

3. Why we collect it

The legitimate purposes for which we collect the data above:

• To send you transactional emails about the Apex Formula launch, your Founding Member credential (if you qualify), and other Vanguard waitlist matters.
• To defend the waitlist from automated abuse, bots, and signup floods.
• To understand at an aggregate level which channels and campaigns bring people to Krytekon, so we can decide where to invest founder time and effort.

We rely on a legitimate-interest basis (in the GDPR sense) and your affirmative submission of the waitlist form (under U.S. consumer protection norms) as the legal grounds for this processing.

4. What we do not do

We state this plainly because it resolves most of the consumer privacy questions you might be carrying into this page:

• We do not sell, rent, lease, or trade your personal data to anyone, for any purpose, in any jurisdiction.
• We do not share your data with advertising partners or use it to build advertising profiles, lookalike audiences, retargeting cohorts, or any similar product.
• We do not use third-party analytics on krytekon.com — no Google Analytics, no Meta Pixel, no TikTok Pixel, no PostHog, no Plausible, no Mixpanel, nothing of that kind.
• We do not profile you or make automated decisions about you that would produce legal or similarly significant effects.
• We do not respond differently to Do Not Track or Global Privacy Control signals because we have nothing to disable in response — we are not tracking you across the web in the first place.

5. Where your data lives and who processes it

Your email address and the hashed IP record are stored encrypted at rest in a Cloudflare D1 database hosted on Cloudflare infrastructure located in the United States. We use the following processors:

• Cloudflare, Inc. — hosting, edge compute, database storage, and bot mitigation (Turnstile). See Cloudflare's privacy policy and the Turnstile privacy addendum.
• Resend — transactional email delivery for the launch and credential messages. See Resend's privacy policy.

These processors operate under their own contractual obligations to keep your data secure and to use it only for the purposes we instruct. We do not authorize them to use your data for their own marketing.

6. Retention

We retain your email address until you unsubscribe, or for twenty-four (24) months after our final launch communication, whichever happens first. Hashed IP records are retained for thirty (30) days for abuse defense. Aggregated, non-identifying analytics data (e.g., "how many people signed up from a particular referrer this month") may be retained indefinitely.

7. Your rights

Regardless of where you live, you may at any time ask us to:

• Confirm whether we are processing data about you.
• Provide a copy of the data we hold about you.
• Correct inaccurate data.
• Delete your data.
• Provide your data in a portable format.
• Stop sending you emails (you can also click the unsubscribe link in any email we send).

Email vanguard@krytekon.com with your request. We will acknowledge receipt within seven (7) days and respond substantively within forty-five (45) days. We will not charge you for exercising these rights and will not retaliate against you for doing so.

8. California residents

Krytekon is not currently subject to the California Consumer Privacy Act or the California Privacy Rights Act because it does not meet the statutory revenue or volume thresholds. We extend the substantive rights listed in Section 7 above to California residents as a matter of policy. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding twelve (12) months.

9. Texas residents

Krytekon LLC is a Texas-based small business and, as such, is currently within the small-business exemption of the Texas Data Privacy and Security Act (Tex. Bus. & Com. Code Ch. 541). We extend the substantive rights listed in Section 7 above to Texas residents as a matter of policy. We do not sell sensitive personal data and do not engage in targeted advertising.

10. Other state residents

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Utah, Virginia, and other U.S. states with comprehensive privacy laws receive the same rights described in Section 7. Krytekon does not currently meet the consumer-volume or revenue thresholds of these laws but extends their substantive protections as a matter of policy.

11. Visitors outside the United States

Krytekon directs its services exclusively to the United States and does not intentionally offer goods or services to individuals in the European Union, the United Kingdom, or other jurisdictions outside the U.S. If you join the waitlist from outside the U.S., your data will be transferred to and stored in the United States. By submitting the form, you consent to that transfer.

12. Minors

Krytekon and the Apex Formula are intended for adults aged eighteen (18) or older. We do not knowingly collect personal data from any individual under thirteen (13) years of age in violation of the Children's Online Privacy Protection Act, and we do not knowingly collect data from any individual under eighteen (18). If you believe a minor has submitted personal data to us, contact vanguard@krytekon.com and we will delete the record.

13. Security

We use practices proportionate to the data we collect:

• TLS 1.3 in transit; encryption at rest for the database.
• Salted SHA-256 hashing for IP addresses; raw addresses are never persisted.
• Cloudflare Turnstile for bot and abuse mitigation on the waitlist form.
• Rate-limiting and request validation at the edge.
• Principle of least privilege for all operational access.

No system is impervious. If we ever learn of a breach affecting your data, we will notify affected individuals and applicable authorities as required by law.

14. Email opt-out

Every email we send through Resend includes a one-click unsubscribe link in the footer and supports the List-Unsubscribe header for one-click mail-client unsubscribe. Unsubscribes are honored within ten (10) business days, as required by the CAN-SPAM Act. You can also email us at vanguard@krytekon.com at any time to be removed manually.

15. Changes to this policy

We will revise this policy when we change the way we handle data, when we launch a product, or when applicable law changes. The "Version" stamp at the top of this page indicates the current revision; a changelog is maintained in our public commit history at github.com/icerocky/krytekon. Material changes will be communicated to existing waitlist members by email.

16. Contact

Privacy questions, requests, or complaints: vanguard@krytekon.com
Krytekon LLC
5900 Balcones Drive Ste 100
Austin, TX 78731, US