Privacy policy

What we collect, why, who receives it, how long we keep it, and how to have it deleted.

Effective November 1, 2026

1. Who we are

firstlayer.tech (the "site") is run by Firstlayer Tech, LLC (in formation) ("we", "us"), which is responsible for the information described here. Questions and requests: hello@firstlayer.tech.

This policy covers the site only. Each of our products will have its own privacy policy.

2. What we collect

2.1 When you visit. Your IP address and the details your browser sends with each request: the page you asked for, the time, your browser's name and version, and the page that linked to ours. The site has no forms, accounts, comments, advertising, or analytics or tracking tools, and it sets no cookies. Its pages load files only from our own server, fonts included.

2.2 Our server's logs. A log line for each request, with your IP address shortened (its last part removed). When a request fails because of a problem on our side, the error is logged with the full request, including your full IP address.

2.3 When you email us. Your email address, your name if you include it, and what you write.

3. Why we use it

The logs: to run the site, keep it secure, see how it is used, and find and fix problems. Your email: to reply to you and keep a record of our correspondence. You don't need to give us any information to use the site; we need your email address to reply.

For visitors in the EU and UK, our legal basis is our legitimate interest in running a working, secure website and in answering messages sent to us, and, if you write about doing business with us, taking the steps you ask for before a contract.

The site doesn't track you or build a profile of you, so it works the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.

4. Who receives it

We don't sell your information or use it for advertising.

Google Cloud runs our server and keeps its logs. Google Workspace runs our email. Both handle your information on our behalf, in the United States and other countries where Google operates, relying on the EU–US Data Privacy Framework and standard contractual clauses for information from Europe. We may also read and answer email from outside the United States. We disclose information if the law requires it.

5. How long we keep it

Server logs: 30 days, then deleted, on the server and in Google Cloud. Emails: as long as we need them to reply and for our business records; deleted sooner if you ask, unless the law requires us to keep them.

6. Your rights

Write to hello@firstlayer.tech to ask what information we hold about you, or to correct or delete it. We respond within 30 days. Depending on where you live, you may have other rights, such as to object to how we use your information or to get a copy of it, and you may complain to your data protection authority.

7. Children

The site is not meant for children, and we don't knowingly collect information from them.

8. Changes

If we change this policy, we will post the new version here with its new effective date.