PrivacyPrivacy

Effective 28 August 2026

1. Scope of this notice

This notice applies to the public website at tunnelsovereign.com and to correspondence you send us through it.

It does not govern the operation of a Tunnel platform deployment. Where an organization deploys Tunnel, the handling of that organization's data is governed by the written agreement between the organization and the operator of Tunnel Sovereign, and, in a sovereign deployment, by the organization's own policies applied to infrastructure it operates itself.

Individuals using a Tunnel service that was previously provisioned to them remain subject to the service terms and privacy notice supplied at the time of provisioning.

2. Information collected through this website

2.1 Information you provide

If you submit a briefing request, we collect the information in that form: your name, organization, title or role, work email address, country, area of interest. Where you choose to provide them, it also collects deployment interest, estimated organization or program scope, and the message you write.

Do not submit classified, controlled, export-restricted or operationally sensitive information through this form. The briefing form is an ordinary business inquiry channel and is not a secure communication service.

2.2 Information collected automatically

The web server that serves this site records ordinary request information as part of operating and securing the service. That includes the requesting IP address, the requested path, the time of the request, the response status and the user-agent string.

This website does not use advertising cookies, tracking pixels, third-party analytics services, session-replay tools, IP-geolocation services or third-party avatar services. Fonts are served from this site rather than from a third-party font provider. No data about your visit is sent to any other company.

2.3 First-party measurement

We measure how the public site is used, with our own software, on our own servers. When you open a page we record which page it was, and if you play the demonstration we record that you started it and roughly how far you watched: a quarter, half, three quarters, or the end. We also record when the Controlled Evaluation Brief is opened and when someone follows the link to request an evaluation.

Each of those records carries a random identifier for your visit, which is held in your browser's session storage and is discarded when you close the tab. It is not a cookie, it does not persist between visits, and it is not linked to you. This means our figures count visits, not people: the same person on a phone and a laptop appears twice, and we have no way of knowing that. We do not describe these numbers as unique visitors anywhere.

If you arrive from a link carrying campaign tags (utm_source,utm_medium, utm_campaign, utm_content andutm_term) we keep those five values so we know which activity brought you here. No other part of the address is stored, and any value that looks like an email address is discarded. We also keep the domain name of the site that referred you, never the full referring address, since that can carry a search you typed or a document you were reading.

From the browser identification your device sends with every web request we derive three coarse labels: a browser family such as Chrome or Safari, a system family such as macOS or Windows, and whether the device is a phone, a tablet or a computer. We keep those, not the full identification string, and they are far too general to distinguish one visitor from another.

We do not store the network address of anyone browsing the public site. The address is used, in memory, for one purpose: we shorten it so it identifies a network rather than a connection, combine it with a secret that changes every day, and keep the resulting digest. That lets us estimate roughly how many different visitors a day brought, and nothing else. Because the secret changes daily the digests cannot be matched from one day to the next, and because the address was shortened first they cannot be matched back to an address at all. We describe the result as an estimate, never as a count of people.

We identify search-engine crawlers and other automated traffic from the same browser identification and count them separately, so they do not distort our figures.

We do not use browser, canvas or device fingerprinting, we run no advertising or third-party analytics of any kind, and we do not attempt to identify anonymous visitors.

2.4 The private portal

Separately from the public site, Sovereign Inc. operates an invitation-only portal for material shared with a named person. If you have an account there, your activity is associated with it: sign-ins, which documents and recordings you open, downloads, how far through a recording you watched, and security events such as failed sign-ins and password resets. That is the point of a private portal, and the portal says so on its own access notice.

For security we record the full network address of sign-ins, failed sign-in attempts and password resets on portal accounts, together with the browser identification. That is a different record from the measurement described above, kept for a different reason and for a much shorter time: a number of days set in the portal's own settings, after which it is deleted automatically. The address of the most recent sign-in is kept with the account so that unfamiliar access can be recognized.

These two records are kept apart. Anonymous browsing of the public site is not joined to a portal account, before or after you sign in, and the measurement described in 2.3 has no field in which an account could be recorded.

The portal sets one cookie. It keeps you signed in, contains a random session identifier and nothing else, and is removed when you sign out.

3. Why the information is used

• To respond to your inquiry and arrange the briefing or discussion you requested.
• To maintain a record of business correspondence.
• To operate, secure and troubleshoot the website, including limiting abuse of the inquiry form.
• To meet legal or regulatory obligations that apply to us.

We do not sell information collected through this website, and we do not share it for anyone else's marketing purposes.

4. How inquiries are delivered

A submitted briefing request is delivered to a Tunnel Sovereign mailbox by authenticated email, and, where the deployment is configured for it, to an internal system operated by Sovereign Inc. No third-party form-forwarding service sits in that path.

If delivery fails, the website tells you so and gives you a direct email address, so that an inquiry is never reported as received when it was not.

5. Service providers

We use a small number of providers to operate this website and business correspondence: infrastructure hosting, email delivery and email hosting. They act on our instructions, and we do not grant them rights to use your information for their own purposes.

6. Retention

Business correspondence, including briefing requests, is retained for as long as needed for the business relationship or prospective relationship, and thereafter for the period required to meet our legal and record-keeping obligations. Server request logs are retained only for as long as they are needed to operate and secure the website, and are then deleted or aggregated.

7. Security

The website is served over TLS. Inquiry data in transit between your browser and our infrastructure is encrypted, and onward delivery to our mailbox uses authenticated, encrypted transport. Access to correspondence is limited to personnel who need it.

8. International transfer

Sovereign Inc. operates from the United States, and information you send through this website may be processed there. Where an organization requires that operational data remain within a particular jurisdiction, that is a deployment question and is addressed in the deployment agreement, including through sovereign deployment, where the organization operates the infrastructure itself.

9. Your rights

Depending on where you are located, you may have rights to request access to the personal information we hold about you, to have it corrected or deleted, to object to or restrict certain processing, and to receive a copy of it. To exercise a right, write to privacy@tunnelsovereign.com. We may need to verify your identity before acting on a request.

10. Children

This website is directed at organizations and their representatives. It is not directed at children, and we do not knowingly collect information from them.

11. Changes

If this notice changes materially, the effective date above will be updated and the revised notice published here.

12. Contact

Privacy inquiries: privacy@tunnelsovereign.com
Security reports: security@tunnelsovereign.com
Legal: legal@tunnelsovereign.com