Privacy & data handling
Brass Tundra LLC operates this website and an owner-only personal-data research workspace. This pilot does not sell or share personal information for advertising, offer data about other people, or accept public customers.
Public website
We use Cloudflare to serve and secure the website. Cloudflare processes technical connection information, including IP addresses and request metadata. We do not add advertising pixels, third-party analytics or tracking cookies. Essential Cloudflare authentication cookies are used for the owner workspace.
Private workspace
The workspace implementation uses Cloudflare Access and server-side token verification. Login is restricted to the owner’s approved email address. Identity setup information and the initial request log are stored as protected Cloudflare Worker secrets and in local private files, excluded from the public site and source repository. These setup details are returned only after verified owner authentication. Reports, requests and recorded attributes are saved as encrypted data in your browser. Encryption uses AES-256-GCM with a passphrase-derived key. The passphrase is held in memory until locking or closing the page; it is not sent to our server. Encryption cannot protect an unlocked session on a compromised device.
Vault backups are encrypted files downloaded by the owner. Browser storage can be cleared or lost; export backups. We cannot recover a forgotten passphrase. The workspace does not automatically upload reports or submit requests to brokers. Opening a provider’s website is separate from submitting a request.
Communications and requests
Contact privacy@brasstundra.com for questions about this project. Cloudflare forwards this mailbox to the operator’s Gmail account. Do not email government identity documents or financial account credentials. Ask for the provider’s secure verification process instead.
To ask about access, correction, deletion or our practices, use the privacy mailbox above. No public report collection or customer enrollment is currently available. Because we do not sell or share personal information for advertising, there is no sale or advertising sharing to opt out of on this site.
Current scope
A website and an LLC do not establish eligibility to access restricted datasets or registration as a data broker. This site makes neither claim. The current project is limited to the owner’s own data. Expansion requires a separate assessment of licensing, security, registration and consumer rights obligations.