What we do and don’t keep

Your dependency file is never stored

When you run the readiness report, the manifest or repository contents you provide are processed in memory only. We do not save the raw manifest, repository contents, or any of your code. We do not log manifest bodies, we do not put pasted content into analytics, and we do not include it in error reports. What we retain are the derived findings — counts, ecosystem, and scope verdict — and, only if you ask for the named packages or the PDF, the email you give us.

Analytics are privacy-respecting

We use privacy-respecting, cookieless analytics to count conversions (report starts and completions, downloads, pre-orders). We do not track you across sites, and we never place personal data in URLs. Analytics events carry only non-identifying facts such as the product type you selected and the counts in your result — never your manifest or your email.

Email & consent

We email you only if you tick the consent box when requesting your PDF. That covers your report and up to a few short, related follow-ups about the Article 14 deadline and your founding-place option. Every email includes an unsubscribe link, and you can opt out at any time. We do not sell or share your email.

Payments & subscriptions

Reserving a founding place opens a checkout hosted by Stripe, which captures and stores your card. Card details never touch this site and we never see or store your full card number. We receive from Stripe only what we need to run the subscription: your billing email, the last four digits and card type, the payment status, and Stripe's own identifiers.

To set the subscription up we collect the work email, company domain and role you enter on the reserve form, and we create your OSPulse account from it. We process this to perform our contract with you — not on the basis of consent — so you cannot withdraw it while the subscription runs, though you can cancel the subscription itself at any time. Billing records are kept for six years after the end of the relationship because UK tax law requires it.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to have it sent elsewhere. Email privacy@fortitude-omnis.group and we will respond within one month. Some data we must keep — billing records for tax, and your awareness record for as long as its evidential value depends on it — and we will tell you plainly when that applies rather than quietly refusing.

If you think we have handled your data badly, you can complain to the UK Information Commissioner's Office at ico.org.uk. We would rather you told us first.

Who processes your data

• • Stripe — payments and card storage.
• • Cloudflare — the commercial backend that holds reservations and the subscription record.
• • Namecheap — hosting for this site's static files.
• • Brevo — sending the emails you have consented to.

Some of these operate outside the UK and EEA. Where they do, transfers rely on the provider's standard contractual clauses or an adequacy decision.