Privacy Policy

Last updated: August 8, 2026

1. Who We Are & Scope

This Privacy Policy explains how Tuxxin LLC ("Tuxxin," "we," "us," or "our") collects, uses, and protects information when you visit tuxxin.com (the "Site"). Tuxxin LLC is a software, IT, and cybersecurity company based in Orlando, Florida, United States.

This policy covers the tuxxin.com website only. Tuxxin also operates other websites and products - for example webshot.site, whack.sh, and heskapi.com (with more launching) - each of which has its own separate privacy policy. Tuxxin's infrastructure also delivers email on behalf of those other sites; that activity is governed by their respective policies, not this one.

2. Information We Collect

Information you provide to us

The Site has one public form - our contact form. When you submit it, we collect the information you choose to enter:

• Name and email address (required)
• Company, phone number, and the service you're interested in (optional)
• The message you write

We don't operate user accounts, logins, newsletters, or a comment system on this Site, so we don't collect that kind of information from visitors.

Information collected automatically as you browse

Like virtually every website, certain technical data is received automatically on every page you view - through our analytics (Google Analytics 4 and our self-hosted Umami) and our infrastructure/server logs. This includes your IP address, the pages you view, referring page, and device/browser. Our analytics and infrastructure providers are described in Cookies and Third-Party Services below. Depending on our logging configuration, our application logs may also include details you submit through the contact form (such as your name and email).

Additional information captured when you contact us

When you submit the contact form, we record and attach the following to your inquiry to help us respond and to protect against spam and abuse:

• Your IP address, browser / operating system / device, the referring page, your preferred language, and the date and time of submission;
• Network and location context for your IP address obtained through a server-side lookup with our WorldIP.io service - including country, network/ISP and ASN, the reverse-DNS (PTR) hostname, the IP range, and an IP reputation score. This is used to screen spam and abuse; we do not use it to build a profile of you.

3. How We Use Your Information

• Respond to your inquiry and provide the services or information you ask for;
• Prevent, detect, and investigate spam, fraud, and abuse (including rate-limiting and blocking abusive senders);
• Operate, secure, maintain, and improve the Site;
• Understand, in aggregate, how the Site is used (analytics); and
• Comply with legal obligations and enforce our terms.

4. Cookies & Tracking Technologies

Cookies are small files stored by your browser. The Site uses a limited set:

• Essential session cookie (PHPSESSID). A first-party cookie set on every visit to maintain your session. Its security features - anti-spam, a JavaScript challenge, rate-limiting, and cross-site-request-forgery protection - apply specifically to the contact form. It is not used for tracking.
• Analytics cookies (_ga, _ga_*). Set by Google Analytics on essentially every visit, by default. Our self-hosted Umami analytics sets no cookies.
• Advertising cookies. Set by Google AdSense only on the /github page - nowhere else on the Site.
• Security cookies. Our infrastructure provider (Cloudflare) may set cookies such as __cf_bm to distinguish humans from bots.
• Third-party frame cookies. The WorldIP.io widget and the GitHub Sponsors card run in their own frames and may set their own cookies.

We do not currently use a cookie-consent banner, so analytics cookies are set by default when you visit. You can control or delete cookies through your browser settings (blocking non-essential cookies won't break the Site), opt out of Google Analytics with Google's opt-out browser add-on, and manage ad personalization in your Google Ads Settings.

5. Third-Party Services & Sub-Processors

We use a small number of reputable third parties to run the Site and respond to inquiries. When your browser loads a page, some of these automatically receive technical data such as your IP address and user-agent. Each processes data under its own privacy policy.

Google's handling of data is governed by the Google Privacy Policy.

6. Email

tuxxin.com does not send you marketing or automated bulk email. When you use the contact form, your inquiry is stored as a support ticket in our helpdesk (see HESK above), and - if our helpdesk is briefly unavailable - a copy may be delivered to us by email as a fallback. We then reply from our business mailboxes. The email providers Tuxxin uses to route, deliver, receive, and respond to mail are Cloudflare, MailerSend, Postmark, Proton Mail, and Gmail. Some of these providers also deliver email on behalf of other Tuxxin-operated websites (such as webshot.site, whack.sh, and heskapi.com), each of which has its own privacy policy.

7. Affiliate Links

Some pages and articles across our Site - including blog posts - may contain affiliate links (for example, to Amazon or Proton). If you click one and make a purchase, we may earn a commission at no extra cost to you. These are ordinary links: clicking one takes you to the third party, which then handles your data under its own privacy policy. We don't load their tracking scripts on our pages, and affiliate links only pass data to those third parties when you choose to click them.

8. How We Share Information

We do not sell your personal information. We share information only:

• With the service providers / sub-processors listed above, strictly to operate the Site and respond to you;
• When required by law, or to respond to lawful requests and legal process;
• To protect the rights, safety, and security of Tuxxin, our users, or the public, including to prevent fraud or abuse; and
• In connection with a business transfer (such as a merger or acquisition), subject to this policy.

Advertising exception. The one place we allow a third party to use data for advertising is the /github page, which runs Google AdSense. AdSense may use cookies to serve personalized (interest-based) ads, which can constitute "sharing" for cross-context behavioral advertising under California law. You can opt out via your Google Ads Settings and by blocking third-party cookies in your browser. Apart from this, we do not share your personal information for advertising.

9. Data Retention

• Contact inquiries are stored as support tickets in our helpdesk (and, as a fallback, may be delivered by email) for as long as needed to handle your request and for our reasonable business and legal records.
• Application and security logs may include your IP address and request data (and, depending on configuration, contact details). They are retained for security, troubleshooting, and abuse-prevention purposes and may be kept indefinitely unless we determine they are no longer needed.
• Anti-spam data: short-lived per-IP rate-limit data is automatically pruned within about 24 hours, but abuse/spam event logs and an IP/network blocklist used to prevent repeat abuse may be retained longer for security.

You can ask us to delete your contact inquiry at any time (see Your Privacy Rights).

10. Security

We take reasonable technical and organizational measures to protect information - including HTTPS encryption in transit, a security-focused infrastructure layer (Cloudflare), access controls, and anti-abuse safeguards. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

11. Your Privacy Rights

You may request to access, correct, or delete the personal information you've provided, or ask us to stop processing it. To make a request, contact us; we may need to verify your identity first, and you may use an authorized agent where the law allows.

California residents (CCPA/CPRA)

In the past 12 months we have collected these categories of personal information: identifiers (such as name, email, phone, IP address); internet/network activity (pages viewed, referrer, device/browser); approximate geolocation (derived from IP address); and commercial information (the service you express interest in and the contents of your message). We collect it from you directly and automatically as you browse, and use it for the purposes in Section 3. You have the right to know, access, correct, and delete this information, and to opt out of "sharing" for cross-context behavioral advertising (see the advertising exception in Section 8 for the only such activity and how to opt out). We will not discriminate against you for exercising these rights.

EEA / UK residents (GDPR / UK GDPR)

If you are in the EEA or UK, you have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local data-protection supervisory authority. Our legal bases for processing are: consent (for non-essential analytics and advertising, where applicable); legitimate interests (site security, spam/abuse prevention, and understanding site usage); performance of a contract or steps taken at your request (responding to your inquiry); and legal obligation.

12. International Visitors

Tuxxin LLC is based in the United States and our infrastructure is operated primarily from the U.S. and other regions we peer in. If you visit from outside the United States, your information will be processed in the United States and other countries, which may have different data-protection laws than your own. Where personal data of EEA/UK visitors is transferred, we rely on our providers' safeguards for such transfers (such as Standard Contractual Clauses). By using the Site, you understand your information may be transferred to and processed in those locations.

13. Children's Privacy

The Site is a business service not directed to children, and we do not knowingly collect personal information from children under 13 (or, for EEA/UK visitors, under the applicable age of 16 or the lower age set by your member state). If you believe a child has provided us information, please contact us and we will delete it.

14. Do Not Track

Some browsers send a "Do Not Track" (DNT) signal. There is no industry-standard response to DNT, so the Site does not currently respond to DNT signals. You can still control tracking through your browser's cookie settings and the analytics and ad-personalization opt-outs linked above.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date at the top of this page. Material changes will be reflected here; please review the page periodically.

16. Contact Us

Questions or privacy requests? Reach us at:

Tuxxin LLC
10226 Curry Ford Road, Suite 107 PMB 1192
Orlando, FL 32825, United States
Phone: 689-300-4505
Web: tuxxin.com/contact