Privacy Policy
Last updated: 26 September 2026. Applies to caisson.sh. Caisson the software is open source and runs on your own infrastructure; this policy covers only the caisson.sh website.
Pending final legal review
This policy describes how Caisson handles your data. It is being finalized with legal counsel and may be updated as our data practices are formalized.
What we collect
The site has no accounts or forms
Caisson.sh has no sign-in, no account, and no form that collects personal data. We do not ask you for an email address to read the docs, view a demo, or start a project.
Cloudflare infrastructure metadata
Caisson.sh is served as static files from Cloudflare's edge network. Cloudflare processes standard HTTP request metadata (originating IP address, user-agent, referring URL) for the purposes of routing, security filtering, and DDoS protection. This processing is governed by Cloudflare's privacy policy and the Cloudflare Data Processing Addendum. We do not receive or store individual IP addresses or user-agent strings ourselves.
If you email us
If you send an email to one of our published addresses, we hold that message and your email address for as long as needed to respond and keep a reasonable record of the correspondence. This is the only way we come to hold your email address.
Analytics
We use Cloudflare Web Analytics to count page views and measure how fast pages load. It sets no cookies, uses no local or session storage, and does not fingerprint you or follow you across sites. A small script from static.cloudflareinsights.com sends one measurement per page view to Cloudflare, and we see only aggregate figures (visits, pages, referrers, countries, load times), never an individual visitor.
Why we collect it
We collect no personal data by default. Cloudflare's request metadata exists only to route and secure the site, and the aggregate analytics tell us which pages people read and how fast they load. If you write to us, we use your email address to answer your message.
Lawful basis for processing
For users in the European Economic Area (EEA) or the United Kingdom, processing is carried out on the following bases:
- Cloudflare infrastructure metadata: legitimate interest. Routing and security processing is necessary to deliver the site securely. No alternative exists that does not involve a CDN.
- Aggregate analytics: legitimate interest. Knowing which pages are read and how fast they load lets us maintain the docs. It uses no cookies and builds no profile of you.
- Email correspondence: legitimate interest. You initiate contact and provide your address so we can reply; we use it for no other purpose.
How long we keep it
We keep email correspondence as long as needed to resolve your question or report and to maintain a reasonable business record, then delete it on request. Cloudflare retains request-level logs and Web Analytics data under its own policies; we do not hold a separate copy.
Where your data lives
Site: Cloudflare
Caisson.sh is served as static files across Cloudflare's global edge network. Cloudflare is certified under the EU-US Data Privacy Framework. Their data processing terms apply to request metadata processed at the edge.
Correspondence sent to our published addresses is held in the mail account tied to that address. We have not published a separate Data Processing Addendum for email; contact us at the address below if you require one.
Access, erasure, and portability
If you are in the EEA, UK, or another jurisdiction with data protection rights, you have the following rights with respect to personal data we hold — in practice, this means any email correspondence you have sent us:
- Access. Request a copy of the correspondence we hold from you.
- Erasure. Request that we delete that correspondence. We will action this within 30 days, subject to any legal retention obligations.
- Portability. Request your data in a machine-readable format. Given the minimal data held, this is a one-line response.
- Objection. Object to processing carried out under legitimate interest. We will assess the objection and respond within 30 days.
To exercise any of these rights, email admin@caisson.sh with the subject line “Data request: [right you are exercising]”. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority.
Changes to this policy
We will post material changes to this page and update the “Last updated” date. Continued use of the site after notice constitutes acceptance of the updated policy.
Get in touch
Caisson Software LLC
Atlanta, Georgia, USA
admin@caisson.sh
For general questions about the product, use the docs or the contact link in the site footer.