Privacy policy

SecretWolf is operated by P2xel Ltd (company 14736585), United Kingdom. This policy explains what personal data we process and why.

What we collect

• Account data — the email addresses and names of workspace members, and your billing details (handled by Stripe; we never see full card numbers).
• Operational metadata — the audit trail: sender, recipient label, timestamps, viewing IP and user agent, verification status.
• Contact submissions — anything you send us through the contact form.

What we do NOT collect

We do not store the content of your secrets, the keys to decrypt them, or attachment content beyond the moment of delivery — one-time payloads are hard-deleted on view or expiry.

Why we process it

To provide the service (contract), to secure it and prevent abuse (legitimate interest), and to meet legal/accounting obligations.

Cookies & analytics

This marketing site uses Google Analytics 4 to understand which pages are useful. It sets _ga and _ga_* cookies to count returning visits.

Nothing is stored until you accept. Analytics storage is switched off by default; if you reject, or never answer, no analytics cookies or identifiers are set. You can change your mind at any time by clearing this site's data in your browser, which brings the banner back.

Analytics runs on this marketing site only. The application itself (app.secretwolf.io), your secret links and your recipients' pages carry no analytics of any kind — nothing about a secret, its contents or who viewed it is ever sent to a third party.

Sharing & sub-processors

We use Stripe (payments), a transactional email provider, and Google (analytics on this marketing site only, subject to your consent above). We do not sell personal data.

Retention

Audit records are retained for a period you control (minimum 3 months on Business); secret payloads are deleted on view or expiry.

Your rights

You may request access, correction, deletion or export of your personal data — ask through the contact form and we'll handle it. You can also complain to the UK Information Commissioner's Office (ICO).