ABAKUC LIMITED · INITIAL VERSION
Privacy notice
Version 2026-10-19-security · Initial account onboarding version. Additional company details will be added to this page.
Who is responsible
Abakuc Limited is responsible for the account and website information described here. Contact [email protected] for privacy questions or requests. This notice covers the website and account lifecycle; customer repository processing requires a separate agreement.
Information you provide
We collect your name, email address and any optional information about your interests or intended use. Account setup records email verification, the version of the Terms and Privacy Notice presented, device labels, passkey public credentials, and relevant timestamps. We do not receive your passkey private key, fingerprint, face scan or device PIN.
How we use information
We use account details to provide and administer the account you request. We use verification messages, session records, access checks, request IP addresses, coarse browser and operating-system labels, and security events to protect the service and prevent abuse. Browser labels are client-reported; we do not use them as proof of a physical device or infer your location. Optional onboarding information helps us respond to your stated interests. We do not treat acceptance of these terms as marketing consent.
Basis for processing
Account creation and administration are necessary to take the steps you request and provide our account service. Security monitoring and abuse prevention support our legitimate interests in protecting users and the platform. We may also process information to meet applicable legal obligations. Where separate consent is required for an optional use, we will request it separately.
Service providers
Cloudflare provides hosting and persistence. Google Workspace delivers account emails. GitHub and configured identity providers are involved when you choose their sign-in methods. Providers may process information outside your country. Applicable provider contracts and transfer safeguards must be assessed for the service being used; this notice does not promise that all information stays in one country.
Cookies and browser storage
Secure, HttpOnly cookies maintain enrollment and authenticated sessions. We use them for account functionality and request protection. The site may store your theme preference locally and interactive demo preferences for the browser session. Authentication tokens are not placed in localStorage. We do not use the onboarding interface for advertising tracking.
Retention
Verification codes expire after ten minutes and incomplete enrollment expires after thirty minutes. Expiry prevents use; it is not the same as deleting a record. Account records are retained while needed to provide the account, and security or legal records may be retained longer where necessary. Contact us to request deletion. Security events are retained for 90 days in the active store. Session metadata is cleaned up 30 days after expiry and email delivery metadata 30 days after creation. Expired incomplete setup, challenge and recovery transactions are cleaned up after a 24-hour grace period. Completed registration and legal acceptance records are retained with the account. Cleanup runs in bounded batches; provider backups may retain deleted data for their recovery period. Deletion requests are handled through our contact address.
Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. We may need to verify your identity before acting. You may complain to the relevant data protection authority; in the UK this is the Information Commissioner’s Office at ico.org.uk. Email us if you have a concern so we can help.
Updates
We will identify the version of this notice presented during registration and update this page when our practices change. Contact [email protected] with questions about a change.